> Wouldn't actually putting "user privacy first" lead to the conclusion that gathering insights like this shouldn't be done on a opt-out basis and instead be opt-in, at the very least?

At the very least collection of non-anonymized data should be opt-in at most. So where is the problem?