Confidential Agents for RAG vs Reco Data Exposure Management (2026)