The bot can use the LLM to scan for "interesting" information. It could read emails, see private documents, browsing histories, passwords, etc. Essentially a Re

The bot can use the LLM to scan for "interesting" information. It could read emails, see private documents, browsing histories, passwords, etc. Essentially a Recall system controlled by adversarial LLMs. That makes the bot much more dangerous.