I think it's more "Copilot can steal the contents of your emails to train its LLM." (and maybe leak it when someone write a suitably crafted prompt.)