It gives you "assurances" that can be broken. They could still be clean-rooming your prompts like Anthropic does. The only way to be certain is if they don't have access to your data to begin with.