They still have the ability to see user content, but it would require them to make a change to their codebase. If they did such a change silently...