They have no fiduciary duty in many cases and can profit from customers’ confusion. But where’s the line between unsavory and illegal?