There's tons more data than that that can be picked up. To start with, what posts you interact with and how. I'm sure there's loads of other data points that can be tracked.
True, open source is always better for the sake of transparency. Worth noting, though, that doesn't mean the server you are browsing on uses the exact build they say they are.