“strongly expect that the entire concept of an agentic browser extension is fatally flawed and cannot be built safely”