I’m pretty frustrated with Muse and the last thing I want to be doing with my free time is defending Meta, but this is such clickbait.

Point by point:

> “OMG you can jailbreak it and get it to spill its VM”

This is the whole point; any content on the VM is yours. It runs in an isolated sandboxed VM separate from stored credentials etc; this is effectively your own computer. You don’t have to trick it.

> It collects dossiers on your contacts

These are more text files that live on your private VM, alongside memory.md, etc. Do you want your secretary to forget every person you contact every day?

> It accessed Messages without full disk access

This whole story never made sense or was substantiated. Full disk access is an OS level security boundary; the user had to switch this on.

> It sold some guys stuff for too cheap and gave out his address

OK this one I basically believe, haha. Because this is the problem with Muse: the LLM is just too dumb to perform complex tasks effectively in many cases.