GDS used to recommend matomo, especially for services with 'sensitive' content (each service on gov.uk is actually developed, hosted and deployed separately). I know the foreign office used it, unfortunately the trend amongst the designers/analysts/product managers had been to push GA without any real thought process (because frankly it's easier than getting permission to setup and maintain a self-hosted product)