Really? illegal? In which areas? In the EU? US?
You obviously do not understand how such data can be collected, and the
way in which databases are shared across the research community.
Nor do you seem to be aware of any literature in the field regarding
real world applications, and the difficulty of working at scale. If
there were any interest from the community in gathering such metrics it
could be done, and we would then have some raw data to work with. But I
suspect that wont be the case.
(I have not yet seen any comments from other users with experience of
commercial applications.)
I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.