Would they still need to publish legalese if they made it so that updates and sending of error reports required the user to click a button every time, and under the button there was some text explaining exactly what data was going to be sent?
https://www.swlaw.com/blog/data-security/2015/03/12/why-you-....
But I know Audacity has a sizable European userbase, too.