Microsoft Copilot Studio can leak High Restricted SharePoint files to any user on the Internet, no user auth required

I've been playing around with the new Microsoft Copilot Studio and came across a point on Microsoft Docs where thet mention that you can't do what the title says. After some digging, I found that they covered only one out of multiple ways in which this can be accomplished. Would love to read your honest feedback.

auth copilot cybersecurity docs files found high internet leak microsoft microsoft copilot point restricted sharepoint studio