Although, the problem is not so single-layered. Do I understand the situation correctly, in case of iOS, to not be subject to additional limitations of the platform that restricts the distribution of your products to the extents that the laws of the countries where your business is registered require, all the user has to do is to fork the main repo (which is, thankfully, BSD), build a minimally acceptable GUI, pass Apple certification, publish the app in the app store, and Bob's your uncle?
It's not "whartever code".
Versus any mildly-technical user being able to stumble into the option and discover they're being spied on in the first place.
Open source = The maintainers should build exactly what I hysterically scream at them
If I had to choose one definition of open source from these two options, it's going to option 1 I'm afraid.