The LLM is also training on or reading your emails; my wife was emailing a client and it produced absolute garbage and in that garbage was information the clanker shouldn’t have known unless it read the other emails. That’s probably not a surprise but the implications are staggering.