If they are doing this without user knowledge, I wouldn’t trust that everything the LLM ingests stays local either, until proven otherwise. Also, not everyone wants to have a local LLM running on their browser eating up 4GB of space.