Obviously not blatant money/data harvesting like with big tech companies, but corporate strong-arming has been done on Linux (systemD) and can be done again. Granted it's much harder on Linux (in the case of my SystemD example there are distros like Void or Artix) but there is still a risk imo.