Your vector database is exfiltrated but the document st...

The blast radius is effectively the entire corpus. Because the container holds significant information, an attacker can perform an inversion attack, which is essentially a search loop that iteratively guesses text and re-embeds it to see if it matches the stolen vector. Claiming that embeddings are ‘lossy’ or ‘not human-readable’ is a misunderstanding of the threat, as they are not encrypted by default.