RAG pipelines, leaking PII into vector databases and nobody's talking about it