I get the point, but they are advertising to the tech non-inclined, and the non-software developers aka the masses both Anthropic and OpenAI. They should be a

I get the point, but they are advertising to the tech non-inclined, and the non-software developers aka the masses both Anthropic and OpenAI. They should be a lot more proactive in figuring these things out, they store and see the logs, they can pre-emptively fix, any cases where they see the model issuing a curl with user's email or other private information in auto mode. It's trivial to do it with prompt injection ofc, but even otherwise as much as I would hate these bug reports, these aren't bug reports on a small indie hacker man project. That's a $100B product, and the fix seems relatively trivial. They could make it opt-in or opt-out after the first approval, I don't see why this issue has been open for so long in general.