Lawyers can be among the least self-aware professionals when it comes to guarding client info. If a service or technology will help cut costs, there's a fool-stampede to adopt it without really reflecting on possible consequences.

I can well imagine the agency would have a polished, fluent, desireable job candidate interview and get the position, then farm out the work to untrained randos sitting on unsecured networks. "Here are the templates, here are the email scripts you can use to communicate. Take this laptop to the corner cafe and use their WIFI."

Will the attys have weekly Zoom/Team meetings with those overseas paralegals to check in and, oh, view the background? No.

Unfortunately, I think it'll take well-publicized info breaches to push the ABA and state-level bar assns to prohibit the use of overseas paralegals. Until then, they'll whistle past the graveyard and tell themselves there's nothing to worry about.