The new risk is not a chatbot. It is invisible automation with company access.
One employee connects a personal agent to Chrome, Gmail, Google Drive, Slack, Shopify, Stripe, GitHub or a company API key. The agent starts saving work, moving data and making decisions. IT cannot see the full chain. The business only notices when the employee leaves, a browser extension is compromised, or an API key is used from the wrong place.