Earlier quoted context omitted.
that's not the only purpose of the SDK, we're using it for social login (login with Facebook).
Why load it unless it’s being actively used for authentication?
Obs: I'm being sarcastic but since it's either this or developer laziness, I'm betting on tracking since I always start from the principle that the developers analysed the situation and made an explicit choice.