Anything that gives any sort of system access to sensitive data and lets agents carry out actions on basically unchecked input sounds like a complete security and privacy nightmare by design.
Security I understand, but if you consent to giving it access would it not be fine for privacy.
https://simonwillison.net/2025/Jun/16/the-lethal-trifecta
Seems to me that these kind of systems, by design, tick all three boxes. I've had many discussions with people that let agent systems read and act on their incoming email for instance, and I think it's utter insanity from a security perspective.