Not only is it worse, but I doubt it is even true in any meaningful sense. Even if the humans aren't 'listening in' and only the student gets the feedback directly, surely there are logs that contain at the very least metadata which a human can very much 'listen in' on and absent regulation with heavy penalties, will listen in on either individually or in aggregate and which could be hacked and sold.