not just sent through, but indefinitely stored on the cloud server, despite advertising that it was not cloud-connected. It also generated facial-recognition based IDs for people which was also stored, and every single device could be connected to through an non-authorized connection request from VLC player.
Back a long time ago when I worked as a cashier, it was store policy for us to bag everything for the customer. They could offer to bag, but we were expected to just start bagging automatically unless they interjected.