The first part (re: AI tools) is ostensibly not true. It all depends on the degree to which the data that they "don't train on" gets laundered and anonymized to the point where they are able to justify training on it without it being "yours" any more.

And I don't think that is publicly known at the current time. (If anyone has any tangible info on this, the please let me know...)

We can only speculate, but we do know these companies are run by amoral assholes out to make their first billion.

If you were without scruples and running such a company, what would you do with customer data, a goldmine of human-vetted code which makes your tools far more useful?