You can't know that anything (especially on the server side) is actually
private. OpenBSD had a FBI backdoor scandal years ago which turned into
"_unlikely_". How does that leave any other thing out there?
I assumed their intentions are/were good as they built reputation among the
privacy/freedom community including the Tor browser.
And no, I wasn't aware about the two items and can't find any reference to
these specific statements. Startpage has long been the default engine in the
Tor browser and I've never seen anybody complaining about it?