It’s simple. Nothing that happens on my device is their data.

Any telemetry that isn’t explicitly opt in with zero consequence for not doing so should be the kind of illegal that gets every asset your company owns seized immediately for non-compliance. All user data collection is spyware.