That's a good way to put it, because, like an employee ipresents a tradeoff. The difference is that you would (or should) probably be very concerned about the trustworthyness and judgement of your personal assistant. Part of that would be based on accountability, if that person screws you over. You would want to feel comfortable that the person you hire and give full access to your coms would be hard to socially engineer or phish. Prompt injection is an unsolved problem and everyone is just kind of ignoring it

Not just unsolved, but potentially unsolvable. The joys of unstructured data

Precisely