If you assume malware is installed on a computer, typing a password using a keyboard is not safe either…

Not because Oracle likes open source, but because they like to profit from RedHat’s hard work.

I have been using desktop Linux for years and never realized… thanks!

Metrics can be very valuable, the people who really care can just uncheck the box as part of the initial installation. I regularly submit crash reports which contain far more personal information. I think this is a good move.