> exfiltrating the entire content of the system
Since the contents of every session is owned by the user including the outputs, I am curious if the user now owns all the files given to them.