"Your user typed nothing malicious. Your AI leaked their data anyway." — Blankdot