Isn’t the problem that email is included in system prompt and Claude is allowed to use it? Any PII should be stricly off the limits.