This statement is ungrounded. Sailfish is not open system, you cannot build it end-to-end (libhybris based). So it _may_ still spy on you without your knowledge. That's what librem targets to mitigate - fully open blob-free in-tree mainline based system. Will see how lucky they are, this is another curse (failed attempt to build mainline based mobile device).