Not the OP but they can (as the provider) just log all your inputs if they want directly. No code word or vulnerability needed.
Indeed, it is a frustrating aspect of using hosted models that a ZDR contract must be negotiated for anything sensitive. There are all sorts of tradeoffs.
Indeed, it is a frustrating aspect of using hosted models that a ZDR contract must be negotiated for anything sensitive. There are all sorts of tradeoffs.