Right, the real issue is that there needs to be a layer between the app and the LLM which handles authorization and decides whether the data is confidential before it’s ever sent to a remote server. It’s not even an LLM issue, it’s just bad architecture in general.

At this point, you’d have to be crazy to be an individual and use MS software.