Perhaps you have vim-tiny installed by default on your distro rather than just vim?

M-x god-mode?

Why did they need to tear it apart to discover the advantage was government funding? It this just a click bait headline?

It is possible that any developer could just say “none” even if the extension does collect data? If it has to be manually disclosed, this won’t stop malicious actors. Only trustworthy extension developers would disclose this.

You can customize the logo. Raspberry Pi OS displays as Debian by default but you can force it to be the Raspberry Pi logo.