Our assistant reads users' email and can send messages and share files. How could an attacker abuse it, and how do you stop that?

Make your call first. Use the published answer and rubric to examine your reasoning when you are ready.