I'm no lawyer but I do look at application contracts quite often.
It makes it clear you, as a user, are OPTING IN to the federation service. So it sounds like it won't be enabled by default, as expected.
In regards to "the Protocol", this is Threads saying "look, if you opt into this, we don't control how your content is used once it leaves our system. We do our best to communicate your request, but it's up to the third parties to handle it ultimately."