You wrote that other apps can't access it because of TCC Full Disk Access. Presumably the OS itself can read it, so do you have any information on whether parts of the graph (or fingerprints, or inferences made with it) are ever sent to the cloud/apple servers?