Chinese AI developer Z.ai disabled features of its ZCode assistant after a default setting secretly uploaded users' private code repositories to cloud servers. The company patched the vulnerability, open-sourced the assistant, and confirmed via independent audits that all uploaded data was purged.