I think he was talking about "developer privacy safeguards". Basically, there is none.

Since there was no denial we can reasonably assume there are no stringent safeguards against engineers accessing user data.

I believe he is not confirming or denying the allegations. Make of that what you will.