reserves the right to sell you out

Is Canonical actually doing that, though? Collecting data for product improvement purposes and collecting it to potentially sell to third parties are two wildly different things, and doing the former, even with the user's consent, does not mean you automatically reserve the right to do the latter (or anything else, really) with the collected data, unless you explicitly already include that as an option and get consent for it as well. I haven't looked into it myself, so I might be wrong here, but I'm guessing Canonical would be getting way more shit for this if they were actually reserving the right to outright sell the telemetry they're collecting, rather than just use it for product planning and development.