[bkircher]

A LLM in a browser has access to untrusted input (a web site) and secrets (my 1password account)? Not sure this is such a good idea.