It's actually simpler: your code is not the valuable part, it's the telemetry/metadata/conversation surrounding your session that's valuable. Every time you press escape, every time tell Claude/Codex that it's being an idiot, your back-and-forth conversations, etc. "when/why did we fail and how can we improve?" is what they want to know.

They can use LLMs to launder confidential customer sessions into trainable data. Then they can claim that they don't train on "your data" without it being technically incorrect.