I think the main problem is lock-in. If you can't get your data out you can't leave. This is true for open source and for commercial products alike.

If you own your data and if you have the option to self-host you can always opt out of updates you don't like.