metastore_url = sc._jsc.hadoopConfiguration().get("javax.jdo.option.ConnectionURL")

It is also visible in cluster logs when the cluster is starting.

You can set your own metastore in Azure SQL or AWS RDS and connect it via a private link, so then it will be inside your infrastructure.