None of those threats have any particular relationship to chatbots or LLMs. If you expose sensitive data on untrusted systems then it will eventually be breached. Ho hum.
Giving LLMs more agency/integrations is what most companies are working on, and prompt injection is specifically an LLM AppSec problem.
I watched your awesome presentation. I don’t recall the topic of sandboxing code execution. AutoGPT has the option to execute code in a Docker Container. Curious what you think of the scenario where an LLM is “tricked” to execute malicious code in a trusted env.