Corporate records and correspondence can be made public due to a lawsuit. So the risk of disclosure isn't new, and anyone should consider it whether they work at a startup or at a large company.
Just another incentive to act with integrity and keep personal correspondence out of corporate systems.