It's in the business's best interest that any questionable discussions happen outside of their systems.
The simultaneous chances of data exfiltration are a considered risk, and there are already legal actions available to the business for that aspect of it. This is effectively a solved problem.