They have both. In the demos they were sending select complex tasks out to chatgpt with a large UI alert confirming the data was leaving Apple's walled garden.