I think the reason Microsoft was concerned about the new chatGPT release was due to the fact that you could prompt the model to a download link of the training files. Thus, if an employee trained a custom GPT on sensitive material you could quite easily retrieve the data.