IANAL, but idk, maybe explain some of this in the privacy policy?

nothing prevents them from removing this verbage from the project

Yes. They have demonstrated this much.

Which is convenient, because now when they decide they do want to sell your data, it’s fine because their privacy policy doesn’t say it anymore!

Man. I want to root for Mozilla, but they are definitely looking down the barrel of enshittification.