That doesn't necessarily hold true for FOSS, though.
That doesn't make the software's user "the product" though. In your case the developer is making himself the product he tries to sell, not the users. This is really not comparable to advertisement and data collection.
Telling people not to trust anything they don't have to pay for seems a really obvious footgun for FOSS.
That's at least my way of looking at it.