I may see your first point, but how is GPL3 worse than a closed source software?
I think CLA is a nuanced thing, since Eclipse also has one and didn't rugpull anyone ever, but their Privacy Policy states that the tool is chockful with telemetry and can collect any personal and non-personal data as they see fit.
When somebody tells that you can opt-out of this, I have a hard time believing that the switches are connected to anything.
[0]: https://zed.dev/cla