It could all be handled nicely if the dev had the confidence and integrity to start with a default “no” for display with an easy way to make it “yes” if the blog owner so chose.

That is the main reason behind the following plugin repository guideline.

#4 - The plugin must not embed external links on the public site (like a "powered by" link) without explicitly asking the user's permission.