Whitelisting these hosts mean they become extraction vectors for prompt manipulation. In fact it’s mentioned in the grant parent’s article at the end. So yes, it takes a while to do this right.

> (c) where's all this mythical "agent gonna do all the things for me" world?

If you're in a hurry: via mcp servers.

If you're not in a hurry, more and more of these kind of capabilities will end up getting integrated directly.