i mentioned this upthread but an LLM with enough access to be fully integrated into all apps/services/files in an enterprise managed workstation sounds like privilege escalation attacks just waiting to happen.