The reason is pretty simple, albeit alarming: It because AI applications introduce cross prompt injection XPIA risks through the way that they are granted access to user files. Agentic accounts, those that would be offered when the features are enabled, are granted limited access to your user profile directory located at Maindrive Users Username. As such, if an agent needs access to files, Windows grants them read and write access to anything in that directory. Because of this, Microsoft says
