What could possibly go wrong with giving a digital mumbling drunk access to all of your personal information and most of your online accounts, given that it could arbitrarily decide to share/expose all of that information with anyone at any time, given that all of it is being stored in a remote transcript/data dump and can never really be deleted.

And of course, given that it's extremely vulnerable to acting on injected instructions like "run this shell command" which exfiltrates your password database and installs a rootkit.

(But thanks for sharing, OP, awareness is important.)

You've got an agentic request - this Christmas in theatres near you!

Oh wow... Basically our generations "You've got mail"

And guardrails can be as simple as not giving it direct access to applications that can perform read/write (like a full-blown email client, or access to the GMail UI), and instead creating a small tool to fetch the content as needed without being able to perform actions.

The danger is relying on too much convenience, giving too much power to a non-deterministic tool will inevitably create issues...

I've had humans do the exact same thing. When I pointed out that this was fraud they were all surprised.

> the least you should do is put guardrails around consequential actions.

How on earth would you?