> A third party that is paid by the first party is not much different from a first party.
This is true from a technical trust perspective, but less true from a legal liability perspective.
If company A sells a product to users with the promise “it will be delivered by company B and we have no knowledge of what you do with it”, and then it turns out there the two companies had an agreement to share data and void that promise, company A is in for a world of hurt when the truth comes out.
Given the small number of people who are aware of and care about this stuff, it would be so much less expensive and less risky to just skip the lies in the first place.
What’s the upside of an elaborate architecture that is all window dressing, which creates a ton of liability, and which fraud likely to be discovered because it’s all written down in code and contracts?