oh cool! It's interesting to see a little bit about their decision. From what @moneyball said in his talk at bitcoin++ (05:25:04):

It sounds like the reasoning is that in a world where there are many Spark Operators, users are vulnerable to this privacy leak if the operators choose to reveal the data or if they have a leak. So rather than have people lulled into a false sense of security, Spark chose to make it clear that your address is trackable.

It seems like this would have been okay if there had been a lot more communication about this as one of the trade-offs of using Spark.

It is still the case that Breez has access to all users spark addresses.