Endpoint DLP not detecting OneDrive on-demand files

Hi All,

we are in process to implement endpoint DLP for All our users (7500 users). during the testing i found a back door that users can use to exfiltrate OneDrive to external storage or cloud storage without DLP blocking.

if the OneDrive files is not completely downloaded to the machine when  file on demand is enabled , and user copy the data and paste it to external storage the DLP not able to block the transfer.

its a very serious issue with the solution and believe need to have solution ASAP.

thanks and apricate any help