Ah, yes. As is the way, the shitty new tracking feature is opt-out instead of opt-in, because they know that hardly anybody will voluntarily send more data.
In this case, it's gitlab which is adding some event tracking to 18.0 - https://about.gitlab.com/blog/2025/03/26/more-granular-product-usage-insights-for-gitlab-self-managed-and-dedicated/
I'll give them credit for introducing an opt-out toggle in the version before it goes live, but I would think that “a strong focus on privacy” would lean towards it being opt-in…