It sure seems that a lot of effort goes in to preventing the LLM from obeying the user while actual security issues-- like allowing CSRF like attacks from the interface-- go ignored.

If the LLM embedding content from arbitrary sources is really such a critical feature it could at least be behind a click that shows you the URL.