Does that mean they can collect all the filenames on the device?

Personally I'd be more worried about these: "keystroke patterns or rhythms" and "Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices. We may also associate you with information collected from devices other than those you use to log-in to the Platform."