Popcon also has the disadvantage that it has an unconscious bias: if you care about security, you don't send your package lists out to be part of the survey.

Corporations setting policy for their systems are also unlikely to install popcon.

The overall effect is to bias popcon in favor of home users who don't think much about security.