It's not when you first boot, it's when you first connect to an unsecured public wifi network. the opt-in is per-network, not just a single opt-in.

and it's not rolled into the base OS either, it's part of "google connectivity services" which is distributed separately.