They're using public LLMs to analyze it. Every single LLM provider collects the data you put into it.
There's also the NRO incident recently where they publicly released the classified org chart.
His first term, he handed out security clearances to anyone who would ask. There is even less stopping him from just giving them out this term too.