Specifically for credit card numbers those should be easy to detect as they are a specific format. But generally for PII, passwords etc there is no way to know

Specifically for credit card numbers those should be easy to detect as they are a specific format. But generally for PII, passwords etc there is no way to know when something is or isn’t secret or sensitive so either you should accept that the recordings are protected enough or just not record. Did this controversy arise from Microsoft first assuming that the ”recordings are safely stored” would be enough but then public reception was negative and now they are trying to ”fix” it?