I don't think any "LLM enthusiast," in their right mind, would feel okay about:

Meta asks users to let Muse control everything from their bank accounts to their emails.

If you use these things at a lower level, that is horrifying. Especially with how rushed the implementation seems to be, even assuming the VMs don't leak.