Yes we at Tabnine have been at this for 7+ years and we believe that this is the current best solution. Only train on fully permissive code and then specialize those models privately for each team/org/org.