Even if I get your point, it sounds like you're trying to imply that the results of the search (documents, email, etc.) are sent, not the search alone, which is completely false.
>"function to search for internal document including a string with company secrets"
Ie, that string is now gone. Some people select rather large parts of a document to find other documents with the exact same data in them. If one were to ask Google, I think they would say that they get everyday multiple page documents sent in a single search request.
I did not get the impression that the GP was implying that the search results are sent.
Even if the data sent is made entirely of the search query, then it is troublesome. (Disclaimer: I haven't used this feature, so I do not have first-hand knowledge of how it works.)
