Isn't privacy a concern? How do consumers ensure that data is not going to captured in a future update without it being open source or having third party security audits?
[1] Loosely; I’d say not referencing any networking entrypoints or dlsym() also counts, as working around that would be very non-deniably malicious.