For example, Debian putting their foot down on closed drivers and (for a long time) downloadable device firmware blobs.

I've also seen Debian very responsive when I pointed out that a particular package was phoning home before consent given.

And one of the notable annoying parts of the Debian installer forever is when you think it's started a long unattended period of installing packages, but it soon pauses to ask you for opt-in to some package usage telemetry (so at least they're asking before doing it).

I definitely get the understaffed vibe from Debian, but I'm also still pleasantly surprised how well they execute in general.

Contrast with a certain commercial derivative -- which snoops, installs closed software without the user understanding that's that they're doing, pushes an IMHO horrible different package manager, is sloppier about regressions in security updates, etc.

I wish I had time to volunteer right now to scratch some of the itches I have with Debian, and very much appreciate all the work that others have done and are doing on it.