It's not genuine concern, in this case. If someone were interested in privacy, they would be better at understanding when a paid SaaS has boilerplate in their privacy policy and why they might use analytics.
You shouldn't have boilerplate in a policy. It's easy enough to find a dozen sites (Shopify, termly.io, etc.) that will generate a tailored policy for you based on your intentions.
Indeed. I typically point companies to the aptly named https://www.privacypolicies.com which I’ve found to be configurable enough for most. There are productized legal consultations available, too.
As someone who also understands the challenges of guiding a business through implementing finely tailored privacy policies, you’re in a position to read between the lines and empathize when you a see a business that collects and uses data more minimally than their policy claims.