Will be interesting to see if they roll this out in the EU (especially with the "Share analytics" box being checked by default).
Data collection for aggregate analysis that discards personally identifiable information in a non-recoverable way similarly does not require explicit consent.
Sounds to me like what they say they're doing is compliant, does not require explicit consent under the GDPR anyway, and therefore whether or not the checkbox defaults to checked or not is moot from the point of view of the GDPR.
I understand some people might not want to trust them, their processes or their competence regardless, but that's a matter that's outside the scope of the GDPR. The GDPR is about what they are doing and for what purposes, not whether you trust them.