Companies should be liable for the serious privacy concerns of LLMs