I thought it should be fairly obvious to people not to rely on code run from Chinese servers in general for security or privacy.
Also, not any worse than the US based services, who already work with US government directly and via secret courts and backdoors -- they also do not report vulnerabilities, and in the case of Claude, will allow you to find zero of them.
In general though, you should be running these on your own servers or compute you control or can trust.