and when they're caught, they'll dispute the claims with regulators, like every company does all the time.
i remember digging a bit into the french data protection office v. discord a while back, when they got hit with sanctions for not respecting gdpr, and they disputed every single claim, sometimes arguing in real bad faith, like them claiming they handle very little private user data, so they don't need to do data protection analysies like the law says.
considering google's sheer empire on data, i imagine they play the same tricks, but like 1000× worse
the package is maintained (will continue to install on modern ubuntu versions), but the software is unmaintained (no bug fixes, no new features, will stagnate and eventually become obselete as incompatible with future desktop standard modifications)