The "Recall" feature has been designed and rolled out in such a shoddy matter that I don't know if you can even call this an "exploit" in the traditional sense. As designed, Recall is irresistible bait for bad actors who will inevitably craft all sorts of methods to harvest its data for the purposes of theft and blackmail.

Microsoft deserves all the opprobrium it's getting over this galactically stupid idea.