That's why I like using a system which gives me control over which updates I want to receive. I'm not forced to take updates on an operating system which can also change the privacy policy on me and has done so in the past.
The Stockholm Syndrome is strong with this one. The fact they pitch their skills at anonymizing and aggregating data doesn't change the fact you can't trust Google to not utilize data exfiltration techniques in the first place. Your argument about open source license changes applies just as much, if not moreso to Google as well.
Have you really thought through that all the way?
This is why it's way more dangerous to give data to even open source apps that are encrypted and secure because if they ever do change your privacy policy and you don't pay attention to it, they could say they start selling your data and you continue to agree to it.