This is exactly why I moved to self hosted code in 2017.
While I couldn’t have predicted the future, even classic data mining posed a risk.
It is just reality that if you give a third party access to your data, you should expect them to use it.
It is just too tempting of a value stream and legislation just isn’t there to avoid the EULA trap.
I was targeting a market where fractions of a percentage advantage were important which did drive my what at the time was labeled paranoia