I think enough customers freely connect their devices to the internet that they don't need to invest in the engineering required to include those kinds of things. I agree they won't have ethical qualms about it. It would also be pretty easy to spot; I feel confident saying they'd be too greedy to be sufficiently sneaky to keep it hidden.

For now, it remains easy and sufficient to not give them your wifi credentials.