whenever I see
- "claude/chatgpt has started debugging your browser"
- have to give an agent full disk and/or accessibility access

I'm convinced we need fundamentally better security primitives for agents to do work as us - and we are living in an awkward intermediate era.