millions dragging sensitive pdfs into upload-first tools every week is the stat that should scare people - most have no idea the file persists on infrastructure they will never see. the fix framing matters too: telling people to check the network tab themselves beats any privacy policy. what do you find convinces skeptics fastest, the technical demo or the breach stories?