> you can totally contribute to a privacy violating network … so long as the data is located and processed in France.

While that's not the issue being discussed here, you should by default only collect & process the minimum amount of data needed for the product/service to function. Analytics aren't part of that and would need to be opt-in.