@Tommy LOL
Nothing, absolutely nothing prevents from doing open-source surveillance.
Specially server-side and where the package manager (f-droid application) fetches from the same server and that android devices are easily fingerprintable (most will happily tell you the model in the user-agent for example).