As long as they are not custodial nodes.

One question I asked without a good answer is what happens when large node software operators like Umbrel decide to sneak in changes without letting people opt out?

Any sufficiently large node software provider could essentially act on behalf of its users.