Disclaimer: I work for Red Hat on Fedora

True but we're already in that boat with the way that we gather statistics from mirror hits. I have a hard time seeing how a method like the one proposed would be any more vulnerable to tampering.

EDIT: spelling

The idea is that it isn't less vulnerable to tampering, but you pay a privacy and public image cost.