Are we talking about the company sending back private information through its client to « fight » model distillation?

Yes.

Enterprise contracts are checked and agreed by lawyers. The contract states no training.

If the provider fucks up, there are actual monetary damages defined for breach of contract.