Whether the tool is first-party or third-party, they still see the entirety of the prompt, which is where the valuable training data is.