Or you could just take a picture of the screen with your phone... employees don't need fancy new tools to exfiltrate data.
This is about attackers from outside your company tricking your LLM into leaking data to them, by executing their own malicious instructions within one of your employee's privileged sessions.
I've written a lot about this problem, most recently: https://simonwillison.net/2023/Nov/27/prompt-injection-expla...
Similar to SQL injection where inserting an arbitrary and unreviewed string into your sql query is a bad idea.