There’s a browser extension you approved months ago that can read your tabs, interact with your AI, and access everything you can.

It looks normal because it is normal. That’s the problem.

“Standard permissions” are enough to turn your browser into a data pipeline you didn’t design.

You don’t have a tool issue. You have an access problem.