What do you mean by "sniffing traffic"? Is this something you observed yourself or just repeating sensationalist claims by others? Are you claiming they install

What do you mean by "sniffing traffic"? Is this something you observed yourself or just repeating sensationalist claims by others? Are you claiming they installed a compromised certificate and are MITM-ing all your traffic !? FWIW, in my case I use the built-in controls for turning telemetry down, and supplementing with a pi-hole on the network that blocks a lot of telemetry endpoints. I'm confident that whatever (if anything) slips through is just generic anonymized usage stats; they wouldn't risk compromising privacy this way especially with GDPR (and other similar things) in play.