New installs make lots of unrequested accesses… fwupmgr, unbound-anchor, ocsp, firefox, all generate telemetry.

Companies have tried buying floss software specifically to add spyware, such as audacity.

It’s not a big fraction of what proprietary OS does, but the threat grows steadily each year.