One workaround is to use disposable email addresses when signing up to anything online, like https://forward.cat
This way I can stop unwanted mail if unsubscribe does'nt work by deleting the alias.
It also help to see who is selling your email.
For example, some years ago, I had the problem with bitdefender, as I subscribed as a reseller (!). I explained what I thought about it to my sell representative, who couldn't find a decent explanation. And stop selling their product. And destroy the alias.
Curious about this - how can you have an 'open-source' service? I'm not compiling or running the software, and I have no idea what their software is actually doing because there's no way to verify that it's the same as what's been open-sourced...