If you're concerned, you don't send it outside of the M365 boundary and presumably your admin has Purview Sensitivity Labels in place covering the document to prevent such activity.
Doesn't that mean you can't actually use it for those sensitive documents?
Doesn't that mean you can't actually use it for those sensitive documents?