I'm wondering - does this mean that malicious websites might also be able to drive our browser agents? And if this is the level of security in the SOTA software companies, what does it mean about all these open source agents we all install?