It's not their problem to solve. Don't give it access to sensitive files on the first place.