Also your city and ISP, but that information isn’t mentioned, so it’s evident it wasn’t to catch all. Nothing in the way it’s worded is consistent with your rationale, and the actual policy is significantly more broad. They’re not specifying the information shared with law enforcement would be limited to the IP address or data that can be gathered from it. It’s a completely separate row.

I don’t see how an auto-update feature would need any of those things either. The request is made by the remote user to the Audacity update server. Of course, Linux servers typically keep logs, but that would be one line saying that in order for the app to check for updates or to be updated, an IP address and connection timestamp may end up on the update server.

It wasn’t about “shoddy tech reporting”. Why would a FOSS audio editing app need to know your country, any personal “Data necessary for law enforcement, litigation and authorities’ requests (if any)”, share it with a wide network of people and potential buyers, as well as their “main office in Russia”? There should be no telemetry of any sort. Any logs kept should be strictly local, which would allow users to send them to the support team voluntarily.

GIMP already had a significant update not too long ago. There were UI improvements and things like effects for layers.