Agentic anarchy: Why using AI browsers just isn't worth the risk