Opt out means “we will be doing this, without permission, unless you tell us not to” and opt in means “if you give us permission we will do this.” Codebases can contain important and sensitive information, and sending it off to some server to be shoved into an LLM is something that should be done with care. Getting affirmative consent is the bare minimum.
Why isn’t “it’s informed and you can just opt out” good enough for paid users? They could’ve developed a single system instead of two if that’s a sufficient standard of care for users’ data.