Comment by skeledrew

The end result is the same but where the responsibility lies isn't. If Anthropic was themself hosting the solution then it would be theirs, but in this case the only thing they may be responsible for is passing data to a 3rd party that - potentially - doesn't have solid security practices.