Not sure that is entirely true:

https://wiki.debian.org/PrivacyIssues