I believe you, I really do, but they are still a foreign nation thousands of km away, and the laws are different and largely unknown to Americans. In their HQ and datacenters, they would also be subjected to a rather different mélange of threat actors, and so an adversary that would have no chance in these United States, might have an opening to use Avast! as a vector, or at least exploit the juicy, juicy log data and telemetry they are able to collect with their root-privileged apps.