The scariest part of the interaction is the first video at https://x.ai/bot where the bot just snags your creds from the browser and takes over. So many people are going to give x all their data and creds.
What? How? Just the x.com creds or other ones too?
Well, it's the "Everything App" after all!
/s
Oh boy, I've always wanted to give a gas turbine powered CSAM generator my credentials! I can't wait, sign me up now.
I assume they store your session state/token for whatever SaaS it needs to work with but not the creds.