"Default" may mean different things. A Samsung phone has a Samsung keyboard as the default keyboard, while a Pixel would have Gboard (I guess).

I assume they send every word you type to their servers, but I also assume it's encrypted in transport, so it would be somewhat safe?

It's a very very difficult struggle.