This is the sanest take I've seen from anyone using the claws.

I would still not want the LLM to have read access to email. Email is a primary vector for prompt injection and also used for password resets.

Agreed, I wouldn't even trust it with read-only access to my email

I'd trust it as much as I would a VA from Fiverr

Want it to check you into a flight? Forward the check-in email to its own inbox

Read-only access to my calendar; it can invite me to meetings

No permissions beyond that