I don't think any rational discussion about privacy can be had without first describing exactly what your definition of "privacy" is in this specific context, A

I don't think any rational discussion about privacy can be had without first describing exactly what your definition of "privacy" is in this specific context, AND you must define a threat model. Otherwise we can't know if the vendor is even relevant to what they care about.