The sorts of stuff collected by opentelemitry are benign. Can it be weaponized? Of course, but that's like using a screwdriver to kill a fly. If I wanted to collect evil "telemitry" I wouldn't touch opentelemitry because it isn't useful for that.

It's like being afraid your browser profiler is being used to spy on you. Could it do that? Sure. but there are so many easier ways to accomplish the same task.