In my anecdotal experience, this is a common problem: if your open-source project has an option for spying on users, the ones who pay attention to privacy and s

In my anecdotal experience, this is a common problem: if your open-source project has an option for spying on users, the ones who pay attention to privacy and security opt out. Debian's popcon survey has a worse version of this problem: it reports back the packages in use -- and nobody setting up a bunch of servers wants to leak that information, so they only get home users reporting in.