The problem too is that while google or the “big players” can be somewhat “trusted” with security, I don’t trust a random third party startup to properly handle this extremely sensitive data. The sheer number of places AI related data is being sent for processing is staggering and unprecedented.
For instance, when I program with Cursor, that data is sent to Cursor severs, then to their tooling and analytics third parties, then to the foundation model providers, then gets trained on, etc.