Opt-in / Opt-Out? A breakout topic for the F40 Change Request on Privacy-preserving telemetry for Fedora Workstation

Part of the problem is that you can’t collect aggregated data without collecting non-aggregated data. Even if you don’t intend to store the non-aggregated data, there are many ways it can be stored inadvertently via logging or some other method.

Even if someone were to audit this process to ensure that it was clean, it wouldn’t be unthinkable to make an inadvertent change in the future that would break this anonymity.