This just pushes the question, what else should be opt-in because it could be abused by someone given full access to your laptop? Saving browser history? Persistent logins? Shell history? Document recovery? Spotify listening history?

This is why Windows has the "airtight hatchway" beyond which security against the user accessing their own data stops applying. Inside your login is by construction where your private data goes. Adding more of it shouldn't matter as it's all protected as the same. Like I agree that this feature is annoying but it's not a security risk, Windows promises no security against yourself.