I'm concerned with whether I'm potentially disclosing trade secrets, violating NDAs or other contractual provisions, or simply risking a leak of my big new idea if someone else's system has a security breach.

As I wrote before, requiring a log-in and open-ended telemetry for a traditional desktop app is a vulnerability with no benefit as far as the user is concerned.