I finally understand why handing an AI agent your Chrome session is terrifying

Google built defences for this and they're good but not invulnerable