Like most attempts to put AI in the browser, that feels stupidly vulnerable to injection.