Even the ability to upload docs would already break rules potentially. eg data storage jurisdiction. Retention. Etc
The places that do allow confidential info on copilot did a mountain of work to ensure all the legal and compliance is fine. No way this “btw it’s enabled now just use your own“ approach flies