Meta's Muse is overestimated: study

Are all of these just flavors of "the agent has the same permissions as the user"? Not that I want to trust Meta with privacy and security?