Unfortunately in this case they do need to be perfect. A model that reads a web page and then emails all of my private data to some attacker who put malicious instructions on that web page isn't useful.
So you are saying (human) personal assistants are not useful? I think many people disagree and most people would want to have one weren‘t it so expensive