Maybe the instances are shared between users via sharding or are re-used and not properly cleaned.
And maybe they contain the memory of the users and/or the documents uploaded?
And maybe they contain the memory of the users and/or the documents uploaded?
Again, what is the risk?