This. There is no practical reason to separate privacy and security in this way.

If bad actors can access your data without your consent, it doesn’t matter if you call it a breach of privacy or security. It’s still a breach. At best, playing semantics like this allows a corp to claim a system filled with backdoors is “secure”. Utter marketing nonsense.