If I had a guarantee from Gitlab that _they_ were scrubbing the data, I would have no problem. I get the sense they know what they're doing (naive, maybe)
However, giving a third party script, potentially unvetted, access to the crown jewels of the company I work for? No fucking way.
They are tracking things anonymously at least in some places, judging by what I've read in the linked Gitlab issue tracker threads. The debacle started with someone higher up requesting to start recording user ID with that data, in order for the "growth team" to be able to do "experiments".
However, giving a third party script, potentially unvetted, access to the crown jewels of the company I work for? No fucking way.
Different. Not a double standard.