The problem is that this way it seems like an impossible battle. Even if you get location data of stuff like downloads (which is not sth you normally get if for example one clones the repo anyway), you cannot prove the software is actually used, unless you use analytics in the software itself. This sounds important for FOSS in the EU.