I think there’s a difference if it’s being run by a non-profit organization that is open source than if it is run by an proprietary software multi billion dollar company, if let’s say, Gittea would do something the likes of this it would probably end up being a libre project, which most likely everyone would be okay with, and they would surely make people know about it firsthand, for example. It’s not so much about what’s running on the servers but about trust and the fact that they own your code to a certain extent.