Why are they doing this? Is is misaligned goals? Presumably the AI agent is given some kind of goal to make decisions from. I don’t see any situation where deleting emails will benefit a goal, unless they are covering up some wrongdoing.
Also, LLMs in these apps use a lot of tokens, so people often use lower-end models, which increases the probability of this happening.