Comment 11 for bug 1305839

Right, so the key here (on the software freedom front), as it was with ubiquity when we discussed it, is that the option needs to be off by default. If a sysadmin turns it on (and I don't doubt that many will), that's entirely fine, but they need to be the ones explicitly making the call.

If we made the call for them, and then noted "oh, by the way, there's some non-free junk installed", that's too late in the process for good-faith here.

And, even if this wasn't about the software freedom aspect of "something in main installing non-free stuff by default", I'd be wary of installing anything from an external repository by default without a toggle (defaulting to off) anyway. Thankfully, most paranoid sysadmins would firewall this to oblivion and notice immediately that it's not working when it tries to call out, but we can do better than requiring people to discover weird third-party server hits via draconian firewalls.