Just another example of why codes of conduct are fuzzy hypocritical bullshit.
If you want to actually change something, create clearly defined, actionable rules, specify scope and follow them 100% of the time. Like "we do not log any information except X and Y".