For me it is a matter of trust. What does it matter if you’re getting security updates faster than everyone else if you’re getting them Solar Winds? In other words, if you don’t need security against nation-state actors, the highest threat is Google / Apple themselves.
Not too many unfortunately. I trust Proton bc I am not breaking any Swiss laws, and I know they leak recovery emails so I don’t have one listed, but that’s about it.
To be honest I’m not an expert in this, definitely haven’t achieved de-googled life yet, but someday I dream I will. Even if they are not collecting usage data they’re surely getting metadata