This is still a problem even if their product only uses public data. Coinbase has access to non-public data, which they can use to validate any analysis or algorithms. Until they explicitly say that no private information was ever used to validate the analytics, it's reasonable to assume they're doing so.