Nutshell:

Copilot for SharePoint gets privileged access to SharePoint, but doesn’t know about access controls. CoPilot to just gives out out the contents of sensitive documents and the access won’t show up in audit logs.

Copilot for SharePoint is a SharePoint backdoor from Microsoft.