I'm not sure what this post even means. You either trust the provider or not. you are already uploading your corporate content via Drive, Gmail, Calendar, etc. but suddenly another service is a security and privacy risk?

MS office has taken the same route (in fact Goog simply copied their strategy of including copilot)

So you might want to look for a totally different provider