> In other words, “generated locally” does not mean that the complete operation is local.

That sounds like a privacy violation that the DPAs should look into.

Edit: Apparently it's disclosed somewhere. Still, that defeats the entire point of local generation...