It might not be a problem in principle, but it's definitely a problem when said one runtime is controlled by a single entity that is both powerful and fundamentally adversarial towards the users.

A privacy fork can only do so much if Google keeps removing underlying things that make it possible. The more it diverges from upstream, the harder it is to maintain.