crummy setup... oh come on, on your mac spotlight is a bloody binary program and you have no way to check the sources. And you critizice the default configuration of an open source program?
Don't need to see the source, just need to watch the network traffic. The source wouldn't be any additional help anyway, unless you compile it yourself again with a known good compiler on a known good system fresh from read only media.
On my mac, both spotlight and alfred (the 3rd-party application launcher I use) are capable of searching both my computer and the web, and neither send my file searches to the internet.