And what average user gets their file permissions correct?
Or has a clue what is running where?
"We suggest you review who has access to your files.
Was this page helpful?"
Microsoft's engineering writeup says built-in file tools use in-process policy checks, while shell commands get OS isolation. That's the boundary worth testing; local inference alone doesn't protect the filesystem.
File system access is where the permission model has to be per-folder and easy to revoke. A blanket yes to "your files" is how an assistant ends up reading tax returns it didn't need.