It's more than that. If I can convince your Writer.com chatbot to rely on one of my documents as a source, then I can exfiltrate any other secret documents tha

It's more than that. If I can convince your Writer.com chatbot to rely on one of my documents as a source, then I can exfiltrate any other secret documents that you've uploaded in the Writer.com database. More concretely, the attack is that an attacker can hijack the Writer.com LLM into divulging whatever details it knows and sending it to a remote server.