I don't think "we don't train on your data" means anything anymore

Between Samsung's engineers leaking their own source code into ChatGPT, DeepSeek leaving a database of a million chat logs sitting open with no login required, and Grok's share links somehow getting indexed on Google with 370k private conversations searchable, I've basically stopped believing "trust us" is a real answer from any frontier lab.

None of these were sketchy no-name startups either. These are the companies everyone's building on top of right now.

What's wild is how little this actually changes anyone's behavior. I still see people pasting client contracts and internal code into these tools daily, myself included half the time.

Is anyone actually changing what they paste into these things because of the incident history, or has "it probably won't happen to me" just won at this point?