They could have been stored at the client, and encrypted before optionally synced back to OpenAI servers in a way that the stored chats can only be read back by the user. Signal illustrates how this is possible.
OpenAI made a choice in how the feature was and is implemented.
OpenAI made a choice in how the feature was and is implemented.