From my own perspective, computing privacy is simple: if something happens entirely on my computer, then it's private, whereas if my computer sends data to the manufacturer of the computer, then it's not private, or at least not entirely private.
The only way to guarantee computing privacy is to not send data off the device.
It ought to be up to the individual user to decide their own tolerance for the risk of privacy violations.
A software bug would be sufficient to make users vulnerable, and Apple can't guarantee that their software includes no bugs.
Collection
[
|
...
]