A privacy technologist is reviewing the checkout flow of a new consumer app and finds that default settings and confusing button placement nudge users into consenting to broad data sharing. As part of privacy governance oversight, how should this practice be characterized to leadership?