What we need is zero trust at the interaction level. Let an AI perform tasks without ever seeing the sensitive data it is using.
Even recording (which they already are doing) is not exposing sensitive content.
Mix that with hardware enclaves and you actually have a solution to these security and privacy problems.