This is correct: Margin accounts the brokers can borrow your shares without permission in most cases; cash and retirement accounts they can't without your explicit permission. Whoever got the email from Fidelity, it was almost certainly for a cash or retirement account.