> ...the majority of customers want features that can only function with the data.

So the right answer is to leave the data collection mechanisms entirely disabled until the customer enables a feature that requires it, enable only the data collection mechanisms required by that feature, and disable them again -and purge all data collected by them- when the feature is disabled.

The physical modules that collect this data and transmit this data should be easily removable by the customer, for those who know that they will never want those features to be provided by their car.

The odds that this is what Ford is doing -at least in the US- are 0%.