Yes, but having some kind of documentation and way to disable it would have been reasonable. Also, the thing is that it seems that apple intelligence models can query this information. So, you know, everything is a prompt injection away in theory.