It has that potential, and I'm sure that's part of the business case for it (along with the more likely concern about exfiltration of data from secure networks).

Or it could be privacy software that lets you look at data you're sending to the cloud, modify it, or prevent it altogether.

It just depends who is in control of the software.