what about encryption only the users have the keys to? I'm assuming thats what parent meant

OpenAI has to have the keys so they can run their models on the text, at user request.

This is kind of a fundamental issue in cloud computing: it's someone else's computer, which means it's involved in someone else's legal disputes.