Interesting. This is exactly what I was thinking when I read that it "can't call restaurants or shops", which seemed like a ridiculously lame "safety" measure, to me. Having a mandatory disclosure and consent step would be super simple and cheap to implement, so there's no good excuse not to require it.

I suppose it may be risky from a product adoption perspective, but if that's true then it probably just means it's a product that's only desirable for one side of the market—i.e., it's good for the party deploying the bot, but not for the one/many subjected to its execution.