Which is I guess an existence proof that this is naturally a filter-level thing.

If we all agree that opt-in (not applied by default) is the best approach, then I agree.