IMO if the "for my lawyer" purpose/intent is not in dispute, then it shouldn't matter whether the service is a search-engine, an LLM, a browser-based word processor, or the drafts/sent folders of a webmail client.

The reverse direction is much clearer: Imagine a client receives an obviously-privileged email from their lawyer, and uses a cloud text-to-speech service to listen to it. Should that audio/text be admissible as evidence? Hell no.

We might also ask if the best venue to decide national AI regulation is a single judge sitting in a criminal case involving a fraudster. If Judge Rakoff is correct, then a trade secret shared with AI is no longer a trade secret. This affects not just a single NY criminal defendant, but anyone that runs a company and wants to keep business practices secret. I would submit that this is no way to regulate a field such as AI.

That said, I note that the court's opinion specifically calls out Anthropic's practice of *training models on user data* as a reason why the defendant could not have expected confidentiality. I do not use these cloud models for anything important precisely because they are operated by companies, like Anthropic, that are completely untrustworthy.