I’ve used agents, they tell you everything they’re going to do. And they’re incredibly slow and stupid. I don’t think OPs original premise of it instantly and secretly stealing your bank account details is realistic.

I don’t think I said prompt injection didn’t exist, just that it didn’t need to be worried about by users in exactly the way that was described