Well they did pull back on ZDR a few times and at least Anthropic has made their arguments (that I disagree with) that model outputs, no matter how much user context was fed, do not fall under their definition of "user data".

Are these prices subsidized by user generated outputs? Can I even trust any answer to not be carefully worded and rephrase the response to "user data"? Even so, what's to prevent some "oops" event that seems to be all too common? At least some months back Bedrock seemed to be properly isolated, but I've heard of many getting non-ZDR notices for new models.