[morgango]

Fair question, slightly nuanced answer.

If going against a datasource (like with Retrieval Augmented Generation), yes.

If the information is just part of the context window, no.

[anshumankmr]

Ideally I would not let anything in the context which is not authorized for the user or the bot is not authorized to do.