But that is a problem. I have access to something deeply secret, I run a gadget, it reads that and sends it to whoever made it
And if you want real life examples, every single LLM provider has gotten insane amounts of data shared to them, even if you have to approve.