I think it’s important to distinguish expected privacy vs actual. The fact that I allow it to send my queries to Amazon isn’t a privacy issue.

If the network behavior showed it was sending data it’s not supposed to do, that would be noteworthy.

So this paper is helpful in this regard (in addition to other material).