Inform CiviCRM users about the information that CiviCRM LLC collects from each CiviCRM site
As can be seen in the code here https://lab.civicrm.org/dev/core/blob/master/CRM/Utils/VersionCheck.php#L132 Each CiviCRM site regularly sends information back to a civicrm.org end point, collecting various data points about that CiviCRM site. This information is collected in the background and to my knowledge, without any prior notice to the CiviCRM user and without any explicit consent given for this data collection. I think this is an important issue that needs to be addressed before it becomes a problem.
Recommend changing this approach such that users are both informed and have the option to consent to this background data collection from their CiviCRM site. This could be an option in the CiviCRM Settings page which defaults to "Off" (disabled), which the user can enable if they want to "opt in" to this data collection system. A link to a page which describes what data is collected, what it is used for and who has access to this data should be made available on civicrm.org.
A similar issue for informed consent is here, dev/financial#167