GitHub Copilot auto enabled itself on all workspaces without my consent

What are the legal consequences of this, if code containing IP/secrets was exfiltrated without consent? (Assuming the ToS doesn't simply allow them to do anything they want with your code.)