So I think, but I’m not sure, this is for group chats. Group chats are only encrypted to/from the server because the server broadcasts the message to each recipient. As the messages are unencrypted on the server, they can feed them to LLMs.

This is different to Signal. On Signal it’s your phone encrypting each copy of the message before sending to each recipient individually.