That is quite true. Though there’s another con if everyone moved to FOSS, the governments will then have less control and access to user data. Right now they can just ask Microsoft, Meta and Google and they readily give minute by minute account of a person and hordes of data. Signal, linux distros, etc don’t collect anything in the first place.