The problem is that for it to be useful for anything but glorified search, it needs your data. But anything you give it access to can be prompt injected out of it