You can mandate an installation on self managed infra. We install / use it on a completely self managed cloud install with pretty solid exfiltration protections. It’s a data platform, provides interesting connections in the data. But that’s where its utility ends.
Do they work with US defense and govt? Sure they do. But you don’t have to share your data outside of your cloud infra.