Exactly, which is why you need to consider this stuff and not use those types of services if you have actual confidential data. Find a provider with clear contracts that prevent these types of changes. Self host. Whatever, just make sure to pay actual attention to what you're doing.