You still need to enable sharing for this to happen, but if you do, then they can probably do anything.

Otherwise they probably need a court order to violate their policy and would be open to lawsuits if it was discovered they were looking at video feeds with the setting disabled.