Versus any mildly-technical user being able to stumble into the option and discover they're being spied on in the first place.
Open source = The maintainers should build exactly what I hysterically scream at them
If I had to choose one definition of open source from these two options, it's going to option 1 I'm afraid.