> It is probably fine to trust current Canonical

Is it? They went for fixubuntu, Mint and just did recently throwed out a voice that pointed at exactly this problem. You may hope it never happens to you but "trust" and accept to maybe find yourself in such a situation you can easily avoid by e.g. using debian direct rather then this derivat? Why? Whats the benefit for this additional risk and legal uncertain?