Prompt injection is my biggest fear. Imho it is almost impossible to make a sort of tool that would be successful in detecting an injection - but maybe some antivirus/antimalware producers work on it…

The rest can be solved - separate account for agent spending (soon offered by your bank or neobank), separate email for agents (already exist) etc.