The main issue why we don't see AI agents in products: PROMPT INJECTIONS

Even with the most advanced LLMs and even sandboxing there is always the risk of prompt injections and data extraction.

Even if the AI can't directly upload data to the internet, or delete local data, there are always some ways to leak data. For example by crafting an email with the relevant text in white or invisible somewhere. The user clicks "ok send" from what they see, but still some data is leaked.

Apple intelligence is based on a local model on the device, which is much more susceptible for prompt injections.