This feels on par with exposing an index of private info to the public and then being surprised about leaks. If you don't want the LLM to act on private info i

This feels on par with exposing an index of private info to the public and then being surprised about leaks. If you don't want the LLM to act on private info in a given context; then don't give it access in that context.