UpCloud's [0] spot instances sometimes match the pricing of Vast.ai instances. I mostly use Vast.ai if my dual 3090s can't handle it anymore for non private things and move to UpCloud spot instances if it needs more.

[0]: https://upcloud.com/

I think it's best to operate under the assumption that anything you're sending to a third party is going to get spied on at some point.