To me there is a significant difference between permanent storing and “keeping private” (23andme is legally prohibited from deleting your genetic data) and not using and deleting after 30 days.

fwiw 23andme genetic data (distinct from summary ancestry data) has not leaked afaik