There are exceptions, though. If you can improve safety of your product by in-depth analysis (cf. FADEC [0]), and the customer is on board (no pun intended), go for it.
This also requires the user to trust you will act within the scope defined, and that can be hard to verify. From a user perspective it's generally safer to just not grant consent.