OpenAI doesn't ship defensive product features out of nowhere. When they announced Lockdown Mode for ChatGPT — a setting that explicitly restricts connected tools and integrations to prevent data exfiltration — that's a product team responding to something they've seen happen, or credibly modeled as likely to happen at scale.
The signal is clear: LLM-connected tooling is a data exfiltration vector. The question for the rest of us building agentic systems isn't "did OpenAI fix it?" — it's "are we waiting for our own incident before we act?"
What Lockdown Mode Is Actually Saying
According to The Hacker News, OpenAI's Lockdown Mode restricts certain tools, plugins, and agentic capabilities that had been identified as potential channels for leaking sensitive information outside its intended context.
Read that slowly: connected tools were leaking sensitive information outside intended context.
