Safety
Google wants to make federated learning verifiable with attested hardware enclaves
Training data is encrypted on the phone and can only be read by audited code running in secure environments. Gboard is already using it.