Opt-out (ideally opt-in) is very important for enterprise customers, especially self-hosted.

Our enterprise security people would complain about data exfiltration risk. GitLab would only survive if the security people approve it & that is a LOT of extra work for the internal team that keeps GitLab sold within the company.