Sure, but now we're comparing an open source product you can build yourself that might be doing something shady but where we have no evidence of that, against a

Sure, but now we're comparing an open source product you can build yourself that might be doing something shady but where we have no evidence of that, against a product derived from the open source version that is openly adding privacy-eroding functionality, and with a corresponding privacy policy that is ambiguous at best about how far it will go.