You are uploading information to the chat system every time you use it. Doubly true if you’re having it analyze or work with documents.

I presume pulling this data out is simple if you’re, say, China.

There really no security to investigate. Without a private instance, it’s an absolute non-starter for anything classified.