> If you have exfiltration and private data but no exposure to untrusted instructions, it doesn't matter either… Assuming the llm itself is not adversarial. Ev

> If you have exfiltration and private data but no exposure to untrusted instructions, it doesn't matter either… Assuming the llm itself is not adversarial. Even then there is a non-zero risk that hallucination triggers unintended publishing of private data.