“Zero data retention (ZDR) policies from AI model companies cannot guarantee that user data will not be leaked due to non-obvious data leak vectors.”