Make telemetry opt-in instead of opt-out

[mbrameld]

Should be a very simple fix.

[mupaneu]

Chances are telemetry has to be opt-in to be GDPR compliant.

[RobSmyth]

In our hostile global data security environment I think there is public benefit to mandate an opt-in approach regardless if the data is intended to be anonymous or not as the concept of anonymity is questionable. It is anonymous until somebody figures out a way to identify you from that data. If real-time then that is even more difficult as attackers can match that data to other data with the same time stamps.

I think the GDPR has the right idea and I understand that organizations truthfully gather data believing it is anonymous. But there is always a risk and therefore there is value in anonymous data collection being opt-in. It is up to individuals to decide on their on-line risk.

[baronfel]

During the .NET 7 time frame we changed the telemetry collection default for the open-source builds of dotnet/sdk to be opt-in. This means that partner-delivered SDKs like those from Canonical have the ability to easily turn the feature off (and I believe they have in fact done so). Microsoft-delivered SDKs will continue to default to enabling telemetry collection, and we will continue to support and adhere to the opt-out mechanisms described in the documentation, as well as declared in the installer UIs themselves.