Quill Cowork has confidential mode and trusts you with the bill

QuillCode adds a real-time token meter to make agent spending visible, but its confidential chat mode initially exposed a critical accounting flaw: deleting all thread data also erased the record of usage, allowing private-session costs to disappear from the ledger. Fixing this required preserving billing receipts while permanently removing conversation content. Multiple adversarial reviews uncovered additional privacy risks across subagent storage, attachments, memory tools, automations, hooks, notifications, settings, context handling, conversation forks, and automated transcript reviews, illustrating how privacy guarantees can fail through overlooked system paths. The author argues that confidentiality protections must be enforced at the model and infrastructure level rather than only in the user interface, supported by end-to-end encryption, attestation, and optional regional model restrictions. Because privacy leaks and unbilled usage often produce no visible errors, the piece emphasizes deliberate testing, transparent cost monitoring, and careful verification of claims about what is retained or protected.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.