Is WordPress SEO spying on us all?

Having conducted tests on several websites and server environments, it looks like WordPress SEO is tracking private data regardless of whether we want it to or not.

The allow tracking field in General Setting controls whether we want to send data to Yoast, and by default this is unchecked. Instead it appears that the yoast_tracking action is being scheduled every time the plugin loaded.

This is giving Yoast access to:

• Site URLs and names regardless of privacy settings
• Post and comment counts
• Custom post types
• Plugin installations
• Theme installations

To fix, open up <plugins>/wordpress-seo/wp-seo.php and replace lines 101-103 with:

if ( isset( $options['yoast_tracking'] ) && $options['yoast_tracking'] == 'yes' ) {
    require WPSEO_PATH.'admin/class-tracking.php';
} else {
    wp_clear_scheduled_hook( 'yoast_tracking' );
}

Please could someone else verify this?

http://wordpress.org/extend/plugins/wordpress-seo/