Yeah you’re right, there’s also the problem of differing definitions of shady, some poeople think microsoft collecting all the data of all windows users is shady, some people seem perfectly happy with it.
Some people will go absolutely ballistic because some developer doesn’t bend the knee to their political beliefs, and consider that shady, on the flip side some people will consider any developer that bends the knee to certain political beliefs shady.
Basically the only solution is to research all individual software on your own and judge it for yourself.