> isn't that what ZDR is for? (assuming you trust that)

ZDR is:

    1. A pinky-promise you have no way of verifying
    2. A contract term, which means its still subject to the good-old "lawful request or court order" clauses
    3. Subject to arbitrary provider exceptions ... see Anthropic and Fable

See Tinfoil (US)[1] or Privatemode (Germany)[2].

[1] https://tinfoil.sh/ [2] https://www.privatemode.ai/

See the sibling comment, tinfoil added scanning inside the enclave.