Here's another Recall issue I see.
I have the sensitive information filter option enabled, highlighted. If I update my credit card on Microsoft's website, it captures the card number, CVV and details, and indexes it into the text database too and stores it under 'credit card', accessible in search.
The only details obscured are by me altering the screenshot to remove some PII.