Genomic data is simultaneously health data, an identifier, and information about your relatives. It is effectively impossible to fully de-identify — as few as ~30-80 independent SNPs can uniquely re-identify an individual, and a genome can be matched to public databases or family members. So "we removed the name" is not de-identification for a genome.
This is the architectural forcing function: minimize where the raw sequence exists, keep it on-device, and never send it to a third party.
In an interview, lead with this — it shows you understand why the on-device design isn't arbitrary.