I’m glad you specified you were going to train it homomorphically, for a minute there I was worried about the privacy implications.

(OP) fwiw I fully agree with the privacywashing you're describing here, and this piece is advocating for a more rigorous standard than input privacy (homomorphic encryption), which is insufficient to enable data owners to actually retain control over their data (but is a useful ingredient).