Just a few years ago, people would lose their marbles if some software installed a background agent to send you notifications or something.
Now we agreed that it's totally normal to have software that does remote code execution on our machines, for which it first has to transfer all data to a remote server.
We've already normalized this. It doesn't really matter who gets access to said machine/data - they will all retain information, and they will all train on it, regardless of what user agreement sais. It's not like OpenAI and Anthropic didn't train on things they didn't have permission to train on.