A few weeks ago, my friend called me and said he was building a small financial app by following a tutorial. Nothing fancy — just something to ask GPT about his recent transactions and get spending advice. So far this was good. He had pasted his credit card number, his name, and his email address …