So, code is not the only data they potentially have access to, and it might not even be the most interesting data. There's also whatever other things you plug the AI into: slack, email, internal documentation, etc.

Also, a lot of people using LLMs are using it on code bases that were written before LLMs were common for coding. So in that context, you really are allowing them to train on your code for free.