I think this can be reduced to: whoever can send data to your LLMs can control all its resources. This includes all the tools and data sources involved.