I mean all your data is already exfiltrated to Copilot, so a little extra worm cannot hurt.

It is fun to see how all AI narratives are collapsing.

I think the damage/risk here isn't explicitly about exfiltration, but could also just be damage/harm to the organization through re-writing content in documents.