doesn't mean the raw text goes into training. they most likely have a pipeline to clean out any secrets before they train on it?

In theory, but in practice how difficult is that?

not hard for secrets with explicit patterns and existing pipelines to detect them

Unless they're base64-encoded or compressed?