This is actually just the things that are easier to discuss, the main hurt points as far as privacy is concerned are the "out of the box" integration with akismet and gravatar. Akismet is not needed in core, disabling pingbacks and adding some captcha style fields to the form handle all the spam, and gravatar..., well if an integration with external service is a must (why must it be in core?), than obviously integration with facebook or google makes more sense.

but obviously, anybody that understands the issue will not even bother opening tickets as there is no chance there can be a decision that is in the power of the core team to decide, and only @matt can make such decisions.