Privacy and security of SailfishOS

Good to mention this! To me there is general secury by preventing hackingand anti-virus, etc. and security by not being subject to surveillance. Not being a developer or techsavvy, I have no idea to how make my Sailfish device more secure. A VPN can be installed, but what more? So I have to trust Jolla.
Open source/Floss doesn’t guarantee that apps are safe. I remember that we once had a torch app in Jolla store that had trackers. Other dev’s noticed it after a while and the app was removed. Why is there still Here Wego in the store?
What about Storeman? Are all those apps privacy safe?
Most Android apps have trackers. Just search for Exodus Privacy, a wonderful organisation. What about Aurora Store? I would like to know what an app from the Guardian does when installed with Aurora Store on my Sailfish device.
Then Google. I am quite allergic to this company. I don’t want to be spied upon and I don’t agree with their mission and policy. Try to avoid them a.m.a.p. So I would like to know if Jolla has connections with Google. Why is there no list of alternative search engines default in the browser? Why is Google in the list of accounts? And why Dropbox in ‘clouds’ and not alternative ones?
Surely we have to trust a company and I am glad that Jolla Sailfish is still alive. The idea that it only can stay alive through the support of Rostelecom however is a bit of a concern. Are the two kinds of Sailfish separated?
I think we have to support the moves from the EU and also from the VS to implement laws that makes us more safe, such as the quest for the abolishment of personalisation that is now going on. Is has to be done by law and by tech.