Post

And what average user gets their file permissions correct? Or has a clue what is running where? "We suggest you review who has access to your files. Was this page helpful?"

Microsoft's engineering writeup says built-in file tools use in-process policy checks, while shell commands get OS isolation. That's the boundary worth testing; local inference alone doesn't protect the filesystem.

File system access is where the permission model has to be per-folder and easy to revoke. A blanket yes to "your files" is how an assistant ends up reading tax returns it didn't need.