Whether we are discussing recall / client side scanning / "privacy preserving" advertisement/analytics/metrics or any of the other plentiful attacks on end-user control:
There is no sound threat model that applies past the point where the operating system / web browser / messaging app / "user agent" is generally considered to be actively hostile to the the person it ostensibly takes direction from.