But that's exactly the point, an enterprise offering should be able to provide guarantees like this while also allowing training - model per tenant. I think the reality is they are doing multi-tenant models which means they have no way guarantee your data won't be leaked unless they disable training altogether.
I'm imagining some corporate scenario where Coca Cola or Pepsi are purposefully training models on poisoned information so they can out each other for trying to use AI services like ChatGPT to glean information about competitors via brute force querying of some type
