Abuse of those files is another problem. I'd say it's a separate problem that's possibly even more important to deal with, but it's different from over-enforcement based on the stated purpose of the data collection.