Important here is that even logged-in users should not be able to easily make the chatbot public by embedding it themself elsewhere since the chatbot may have internal access restricted knowledge.

This is important to me too. I don't see any way to capture user information such as IP address or passing along authentication details, which would be important for preventing abuse of the system. GPT-4 isn't cheap!