Pop!_OS (no Ubuntu telemetry and OpenSnitch) over MacBook Air is working flawlessly. Company MacBooks are with Arch/Manjaro. Will run Catalina for specific tasks without internet until it breaks completely.
The hostile design decisions of Apple are unbelievable. After 20 days of public backslash Apple is preparing for massive iPhone 13 campaign and pushing this obviously flawed intrusion with "common good" goals, normalizing surveillance on a new level. And all of this after Pegasus/NSO.
But actually I am glad. No more shiny toys and marketing illusions for me. Expect everybody to follow suit. Year or two down the road this type of scanning and control will be mandatory.
So the only way to respond is to invest in your privacy. Not in user-hostile, dark pattern designed products.