First time I hear someone saying that. Can you enlighten me as to how Metamask is violating user privacy?

Does it have something to do with the "Privacy Mode" feature that gives your ETH address to sites? [I do not know Metamask too well, I have only used its WalletConnect integration a few times and barely ever tinkered with its settings].