Many places in the US get their supply from Sysco: https://shop.sysco.com/

The link mentions that it is only ran as part of a debian or RPM package build. Not to mention that on Arch sshd is not linked against liblzma anyways.

Unfortunately Mozilla doesn’t seem to be opposed to the attribution, only the implementation. They have their own proposal called IPA:

https://blog.mozilla.org/en/mozilla/privacy-preserving-attribution-for-advertising/

https://github.com/patcg-individual-drafts/ipa/