There must be a bulk discount on those mindcuffs, considering there's a prompt injection or a related confused deputy story on HN every other day.

Literally from hours ago: https://news.ycombinator.com/item?id=49506819

Even if you believe that they can't be tricked directly, consider that these things will happily build a small node.js app in the background just to fulfill some request, run npm install... and that might've already compromised you if you're only somewhat unlucky.