If you actually talk to some of those people as people (person to person, just shooting the shit, not questioning or obviously gathering intel or anything) and the subject comes up, they'll straight up tell you that.
It's not like we can do anything about it. Customers can't control what a business does with the money they pay.
Writing and calling don't work. The best any one person can do is cancel their service, but they're in the minority.
If it was that easy, I don't think the US government would have mandated a whole project to figure it out. NASA would have done it by now and been using it internally for a while before anybody noticed.
That's not sarcasm - that's kinda how NASA solves weird (to baselines) problems like this. They just sort of do it, it's done, and then somebody might get around to publishing a paper about it. At least in the years I worked there (GSFC, 2010-2013) it used to be a thing that engineers would chat about while waiting for the coffee maker to finish brewing a fresh pot, or maybe doodle on a bad while waiting for a run to finish.
Basically, if you have a patched SSH client with the right ED448 key you can have the gigged sshd on the other side run whatever commands you want. The demo just does id > /tmp/.xz but it could be whatever command you want.
If you actually talk to some of those people as people (person to person, just shooting the shit, not questioning or obviously gathering intel or anything) and the subject comes up, they'll straight up tell you that.