Can you imagine giving an AI access to your messages, notes and calendar though?

I use agentic coding, this is next level madness.

I guess what’s wrong with it? Let’s say it has read only access, new messages and calendar invites need approval. I’m not sure I understand the harm? I suppose data exfiltration, but like you could start with an allowlist approach. So the first few uses and reads take a while with allowing the ai to read stuff , but it doesn’t seem that crazy given it’s what we basically do with ai coding tools?

I think (most of) them register new accounts for the agent.