That specific attack requires adversarial inputs crafted crafted against gradients so only works against open models (requires known model weights). There are d

That specific attack requires adversarial inputs crafted crafted against gradients so only works against open models (requires known model weights). There are dangers that include leaking PII from your current context, but also worse if you are using the model with RAG or with other types of system access so I don't think it's as innocuous as you are assuming.