Telemetry should be opt-in
After using it for years, today I learned that GNOME Software computes a uniquely-identifying key for me and my machine and sends it off in the background, along with information about which apps I have installed, even if I didn't install them from GNOME Software.
There should absolutely be an opt-in notice before anything like that happens. I don't care how hashed the user names and machine IDs are.
I really thought GNOME was better for privacy than this. I realize that those popular commercial OSes are setting the bar miles underground in this regard but that's no excuse.