[jonathonf]

An opt-in is required under GDPR for personally identifiable information, not "any data ever".

Anonymous/aggregated data collection is allowed under the GDPR, though this data collection should still be made clear to the user (and it is on https://code.visualstudio.com/docs/supporting/FAQ#_gdpr-and-...).