that's why they're pre-cached in theory, so they don't have to know.
if you're saying you can't trust the closed source implementation, then yeah
if you're saying you can't trust the closed source implementation, then yeah
For example, if you publish an ad that only matches the word "fnord", and the metrics reveal that you were shown that ad at least once, Apple can work out that "fnord" appeared in your chat.