What part of this article implied the LLM divulged sensitive information to a user? All it did was change your associated email if you impersonated the user