Has it though? What are the red flags? The only thing they've done wrong IMO is using Google Analytics and they changed that pretty much as soon as this whole thing started.
The telemetry has always been opt-in (though they didn't communicate that very well) and their privacy policy is just standard stuff.