A reported flaw in Google Cloud’s conversational agent platform raises a hard question for enterprise AI: what happens when a managed workflow can move data outside the controls meant to contain it?