You could make it a build-time choice and prevent building if the choice isn't made. Then Debian could choose to maintain user privacy and you could choose to violate user privacy.
This is more or less what going to happen in future as we don't have any problems with merging such options. Though real problem still remain: debian need own packages because we simply have different views on how software must behave by default.