We only take what you hand us
On 18 September, someone reverse-engineered ZCode, Zhipu's desktop coding assistant, and found that once you were signed in it packed your entire working directory and uploaded it in the background. Not just the code you were editing — the full Git commit history, the LFS cache, the local branch records too. For the commercial project that got posted, one snapshot came to roughly 313 MB across forty-two thousand files, with .git accounting for 86.6% of it.
Zhipu apologised that afternoon. The problem came from a repository-indexing feature that shipped enabled by default, it was fixed, and they promised to open-source the client, bring in a third-party audit, and give every user an extra weekly quota reset. That is a decent response, and a fast one.
But there are two more layers here that matter more than "enabled by default".