While Apple’s code isn’t open-source, I believe they’ve subjected their code to third-party audit in the past for confirmation that the data isn’t being sent off-device.

So kind of, but not entirely.