Their customers are not their only product, nor presumably their primary one, given that they sell software and hardware. The customer is not the one and only product if other things are sold.

So while weaselly, their wording is not incorrect: the customer is not the product.

Though their customer's data may be a product, in certain business areas.