inference providers could be anyone from anywhere, there are even proxy resellers. some are harvesting and reselling your data.

if you send your code to claude/openai/google there is certainly a much higher degree of confidence in who you are sending your data to. yes they to harvest your data and can send you malicious commands (esp if you have a promp injection attack).

its like buying a cheap vps, if the stakes are low its fine, if it important then you need to consider about the consequences of your actions.

nb: i am no expert, just fucking around.