Think about it - how often did you post the Gmail authentication URL or another API token in the Telegram chat? Yes - you should feel at least a little uneasy now.
WhatsApp works but is not so tightly integrated.
And regarding Signal, Meredith Whittaker rightfully pointed out at a conference last week that giving web access to your agent opens up access to all private chats. Probably something you wouldn't want either.
So what's the way forward here? To me it feels like a fork of Signal that would be used for anything agentic in order to separate it from the human interactions would make sense. Or at least compartmentalization so that an agent never gets access to the Crown Jewels without approval.
Any other ideas?
