I'd personally not wager that this will be a priority, but it could be done in time, not necessarily by Jolla.

I'd be more worried about Sailfish applications having spyware, as you call it. The OS doesn't really matter sometimes. Granted, Android has loads of it, and a lot of applications are designed to access your information and give it to somebody (Google by default), mainly because Google's business model is based on that _but_ that won't stop -for instance- popular sports tracking applications from making you upload your training information to "the cloud" so that you can see cooler reports and they can know how healthy you are.

Privacy/Security are good concerns and apply to everything - we still don't know how good Sailfish will be at that, for that matter, most people have given up on this.