If it is hashed... then it will take a LONG time to figure out. Programming systems such as "Denuvo" that encrypt on run time and stuff, can make even reverse engineering troublesome.
It's also the case of "can" instead of "will". I know Google can track and change anything and everything on my mobile. I don't expect they will. Though I use it as a mobile, and rarely would do any accounting/work sensitive stuff on it.
But I can understand if someone was say trading millions in stock/working for a big company, the worries of the likes of MS now having a method of gathering data is more a risk and a worry (though remote desktop always existed
it was more the users fault in that case!).
How many leaks have we seen recently, even cloud password storage getting broken/exploited.