Hi, thank you very much for this work, sounds great!
Only point I have: maybe make sure that the opt-in / default settings are not only mandatory for application developers, but also for packagers / distributions. Some distributions have rather questionable views on privacy and by default sent information to third parties, so I would feel much more safe if they weren't allowed (in theory) to flick the switch in their package by default to "on" either. Kind regards, Christian