Comment by kanzure

Well, you could intercept those (gmail etc) requests locally, run fast local classification, and deny anything you don't like. Meanwhile, you can still grant some non-zero level of access and get the agentic benefits?