It also uses your credentials to do so and doesn’t ask any permissions for any of it including whatever else it wants to do outside the browser sandbox where it lives. Anthropic can easily remedy the situation but they didn’t set it up that way. And the question is why.

Not calling it spyware is like not calling McDonald’s “food”. While technically true, it’s just how it works.

I don’t think it’s actually doing anything nefarious yet. fwiw.