Reactive instead of proactive. Weak sauce.
“You know when a colleague overshares at work? It's awkward at best.
Microsoft's Copilot has been doing an AI version of this behavior, which has unnerved corporate customers so much that some have delayed deploying the product, as… Microsoft released new tools and a guide to help customers mitigate a Copilot security issue that inadvertently let employees access sensitive information, such as CEO emails and HR documents.”
https://www.businessinsider.com/microsoft-copilot-oversharing-problem-fix-customers-2024-11
@feloneouscat far be it from me to defend MS but copilot doesn't introduce any extra access to files and data, just another means to interact with it.
i.e. folks could find ceo emails if there isn't proper access controls governing their mail before copilot.
adding copilot might provide an easier means to derive interesting data from the items you do have access to, but that's different and what "customers" confuse as copilots fault.