Reading about Denmark banning Google Workspace in schools for GDPR reasons - they found while the data was stored locally and encrypted, Google support in the US could still access it unencrypted! (This is a different issue from some European countries banning Google Analytics)