> Other less nefarious uses are to ask about telemetry / GDPR before installation.

I’d imagine you’d want to gate this through the process itself to ensure users have actually accepted, especially as EULA enforceability varies from place to place.