Right, a client that signs away your copyright without permission is just malware :-)

A good client should clearly prompt for permission, at least the first time.

Ideally it should also do "AI" face detection and turn the license off, since the people in the picture didn't necessarily give permission.