I think the definition of 'third party' really needs an update. It should include other business units of a company not related to the product.

Google's Ad unit should have no access to the data generated from the Classrooms sites.