If locking the user's data was the goal, Google would many a non-negative amount of effort locking the user's data from malicious apps.

Instead, they work on mixing the data so much users can't tell what is being accessed, blocking data-redacting apps, and making sure term changes are invisible.