I hold the inverse risk assessment- I think acting on a peek risk is much higher with larger operations such as OpenAi or eg Amazon -as they've allegedly done the same on their product marketplace and deciding on generic products, in addition to open source-alike service offerings.

Larger entities have the resources, the inclination and the protective legal teams to act much differently than a resource tight n-tier platform operator

It's really quite the opposite.

Large firms have a much harder time hiding that kind of behavior, and they have much more to lose.

Large firms require processes and controls around everything. If Amazon is peeking into corporate customers' data, then there have to be mechanisms designed to allow that, a whole bunch of people know, it's part of engineering designs, and a whistleblower is going to leak it to the press.

And then Amazon is going to lose all of its business customers once its privacy guarantees were shown to be intentionally circumvented.

It is simply not economically rational for a company like Amazon or OpenAI to look at the data of its corporate customers.

Regular consumers are a different story, because you need to respond to abuse, illegal activity, etc. So they don't have the same privacy guarantees.

But corporate customers, that stuff is watertight. No cloud provider is going to risk losing their entire business because they violated their privacy guarantees.