while i don’t want to throw shade on the developers’ intentions, nor have any real proof of what data is being kept, a fetch request bears by minimum the source ip (which can be geolocated) and the fact that the homeserver exists and runs continuwuity.
i’d suggest a matrix channel as alternative, so hosters can opt-in by joining. plus, by leveraging the matrix protocol, such announcements become federated push notifications, meaning they could come from any homeserver (limiting ip logging) and don’t imply the continued existence of such deployment, or the software which is being run
even converting such mechanism to an opt-out “auto-join announcements channel” would be more privacy respecting



what’s a snapshot, new kernel? lets roll!! almost 2k packages in
never really broke my arch tbh, its been serving flawlessly for 7 years now. its a decently recent thinkpad tho so stuff tends to just work and i have no gpu to bother about