Am I the only one who find it disturbing that a privacy focused service publishes a detailed report of which institutions is accessing their service, just to make a point?

They say they don't have data about individual IP addresses, and their report is follows their privacy policy. Yes, right, but think about it as a matter of principle. Normally, a privacy focused service shouldn't collect any data, but for technical or legal reasons, sometimes, they have to. They may need to know how many queries they have and from which zones to properly dimension their infrastructure for instance, so it is normal for them to have these logs, but publishing them in a blog post just to make a point feels like they are ready to use collected data beyond their intended purpose if it serves their interests.

Legally, it is fine, and is is unlikely to hurt anyone, but on principle, that's a red flag.