Sure, but companies would typically take responsibility for the leak, and the bug could be fixable in a deterministic system.

Here we get a half apology and a reason, but the passive, "we let this happen" is telling. The apology isn't for the bug, but the inability to manage their own system.

> I'm sorry we let this happen. Users had reported Claude would hallucinate names for things like @author tags, since it didn't have context on the account. So we added the account email in the model's context for signed-in users.

That's admitting the leak was intentional, and because such harnesses are loose there can be no assurance it wont happen again.