100% agree. This is the second time Damus has lashed out at user sovereignty, this time it was (for me) less intrusive, but it should definitely be optional and disabled by default.
Since I am criticising gratuitously, I also don't think it's right that all new pubkeys are created and automatically follow the developer’s profiles (without asking it).
I think the line that separates user sovereignty should be sacred, and as usual, we allow it to be crossed without anyone (well just a few crazy old men) noticing.