Some parts of the report are deliberately anonymized, too -- for example, if an executable is running from the user's home directory, that path is literally displayed as "/Users/USER/" rather than including the actual username.
Seems like it would be easier to use ~/ type of something. At least the path would be useable/valid while still being anonymized.
Most Linux distributions have a similar mechanism.
AFAIK for example on Fedora this (ABRT) is opt in and only sends "thing crashed" if you opt in. You need to explicitly manually check and confirm a full crash dump before sending it, so really not anything being done without the user knowing, at least on Fedora.