> This is because Apple's current privacy posture is "Trust Apple with your data" rather than "Trust no one with your data - including Apple"

I think that's uncharitable. Apple prefers not to have the data either, hence the preference for on-device processing.