"The extra capacity can be (automatically) switched off and forgotten about as soon as they are no longer needed."
And when that's done what happens to the sensitive personal financial data left on the storage devices? Is it left for the next customer to pick up of they do an od over their newly spun up devices or is it completely overwritten with junk? And if it's supposed to be overwritten who verifies this?