> From reading that issue, it sounds like some people are worried about compliance with security policies (whether personal or corporate)

The right thing to do, then, would be for the OS to have a group policy setting like:

"Disable application features that rely on processing documents, data, or application state using remote third-party inference APIs."

...and then for apps to look for it and respect it; and for corporations concerned about this to set it as part of MDM.

Then apps could offer these features as available by default, but also forcibly disabled when relevant.