Jolla had ties with Russian state companies, I wouldn't be surprised if they planted backdoors all over the place.

And in any case if you use Jolla without the Android emulation layer (so Google again), the app ecosystem is as barren as the Siberian wasteland.