I think the damage/risk here isn't explicitly about exfiltration, but could also just be damage/harm to the organization through re-writing content in documents.