So then the premise that I'm reading here is that collecting anonymous data is fine, but collecting person information is bad because the data can get leaked.

Is it an admission that Apple doesn't collect personal information but happily collects and sells anonymous data?

Anonymous data is easy to deanonymize and/or use maliciously in the way I mentioned above. I spoke to a data scientist a few years ago and he was explaining how a company like Facebook, for example, can build an anonymous profile about you using anonymous data and even with GDPR and European privacy laws, this data is not considered personal information. Then if you delete your account and recreate another, they will very quickly be able to identify your behaviour as a match for that anonymous model and you'll wonder why Facebook seems to know you so well all already.

It's one thing to talk to a friend or random person on the street and tell them you've just come from X shopping center, it's another to tell an agent that tracks people for a living and fishes for information in order to make money from it -- even if you don't know the person and they ask no personal questions. I can imagine people doing it on the street if there is an incentive like cupcakes.

Online, we don't get to know how our data is used, but worse still, we don't get to see what data is being shared.

I guess we still aren't ready to have full disclosure and full transparency.