My team and I are with Brian on this -
Matt - this is yet another intrusive and unwanted addition to WordPress - (this time via a WordPress maintained plugin) - was this SPYWARE injection discussed on trac BEFORE inclusion? If not, why not? It goes completely against the transparency requirements of the open source declaration. Why is there no mention of this footer script injection on the plugin page? What are you hoping to garner by hiding this addition?
This is starting to happen too frequently with WordPress - issues like the involuntary_P_dangit rewriting that broke URLs, this new SPYWARE in the footer, making a total balls-up of the VHOSTS function in the 2.9.2 to 3.0 merger, and other issues, are destroying your credibility as a paladin of the open source community. As my grandmother used to say, "You need to buck up your ideas young man, before you find yourself with no friends." And as my mother still says to me now, "You're never too big for a boot in the seat of your pants."
This footer script is not an acceptable action Matt - I'll be pulling this plugin off all our sites and switching to an alternative stats solution - I DO NOT want an unmonitored 3rd party recording all our visitors actions on-site, the keywords they use to get there, and those they use to navigate internally, and I most certainly do not want an online behavioural analysis group like quantcast.com monitoring activity on our sites without the express permission of myself and our site users.
We'd wondered why our LAN's antivirus layers had started rating our sites with a yellow icon - now we know.
I particularly do not like that you tried to camouflage this behind a wp.me short link so that searching the code did not find quantserve or quantcast in any of the files or templates - you do realise you have just shown hackers and other miscreants how to hide their activity - don't you?
That's another reason to ditch all usage of, and permissions to include, url shortening services on all our sites - as a preventative measure to stop others following your example. Have you not been following the news about short url's as routes to malware injection on twitter and facebook? I am severely disappointed in you introducing this major security threat.