Great idea, happy to ~steal~ be inspired by.
I propose a few other common elements:
1. Another AI agent (actually bunch of folks in a 3rd-world country) to gatekeep/check select input/outputs for data leaks.
2. Using advanced network isolation techniques (read: bunch of iptables rules and security groups) to limit possible data exfiltration.
This would actually be nice, as the agent for whatsapp would run in a separate entity with limited network access to only whatsapp's IP ranges...
3. Advanced orchestration engine (read: crontab & bunch of shell scripts) that are provided as 1st-party components to automate day-to-day stuff. Possibly like IFTTT/Zapier/etc. like integration, where you drag/drop objectives/tasks in a *declarative* format and the agent(s) figure out the rest...Ironically, even though you were being tongue in cheek, the spirit of those ideas was good.
Any would easily be bypassed by a motivated model able to modify itself to accomplish its objective.