Marketing should always be OPT-IN by default, but these extra steps to opt out is truly asshole design.
Oh, and on the opt-out confirmation screen, you get two options: Yes or No. The button colour for “yes” is white, and the “no” button matches the “save” button on the previous screen, so it’s easy to accidentally cancel the opt-out. Double-asshole design!
As far as I know, there isn’t a single bank in Canada that offers this. Extremely frustrating and impossible to trust any bank with my money if they don’t even take security seriously.