Being a foundation does not entirely remove the incentives to do shady shit, it just reduces them a bit. Look at ISOC's sale of .org or for Mozilla when they gave Cliqz the browsing histories of a random sample of all German Firefox users.