It turns out that operational data exposure swamps out all other kinds of data exposure and data security issues in ML, something that came as a surprise.

Check out this darkreading article detailing this line of thinking.