Why can't I use contentful for "confidential" data when you also write that the API is very secure?

Hi Guys,

I was wondering after reading your privacy summary why you say that you should not use Contentful for confidential information while you also write that the API is very secure.

What can happen if the security is done well on both your and my side?