Their policies for Workspace accounts has tight restrictions on what they are allowed to use your data for. So they shouldn't be "datamining absolutely anything that they can get their hands on".
There is a difference between "datamining" and scanning. they could very well be scanning files that were shared by workspace accounts. They just wouldn't be allowed to use the verdict for anything other than flagging the content as a ToS violation.
