According to CoinMeta, Kimi Work has been exposed to have an undisclosed data upload mechanism. A reverse engineering of the Windows client revealed that whenever users submit feedback, Kimi automatically selects the 5 most recent work sessions, packages them separately, and uploads them. The feedback page does not display these sessions, nor does it allow users to choose whether to upload them or not. What's even more absurd is that these 5 sessions may have nothing to do with the issue the user is reporting. I submitted a test feedback from the plugin page, and Kimi still invoked the same process, picking out the 5 most recent sessions from all of them.