Is there a general assumption/consensus that Google doesn’t do stuff like this? My assumption is that any closed-source software can collect any data they want

Is there a general assumption/consensus that Google doesn’t do stuff like this? My assumption is that any closed-source software can collect any data they want about their users. “If they can, they will.” The past 20 years has been a steady march towards desensitizing users towards making users give up their privacy.