Article

2026: The State of Consumer AI

Menlo Ventures · menlovc.com

Survey finding that 24% of US AI users use an agent regularly and 32% have let AI act for them without final approval, which is why the guardrails matter now.

Open on menlovc.com ↗

It answers 9 questions

  1. Should my startup add AI features, and which ones actually matter to users?
  2. What should I hand to an AI agent, and what should I keep doing myself?
  3. Is it safe to let an AI agent use my logged-in email, bank or social media accounts?
  4. What do AI agents cost, and why do I keep hitting usage limits?
  5. Can I trust AI with health, money or legal questions, and how do I use it as a second opinion?
  6. What can go wrong when an agent acts on my behalf, and how do I keep it safe?
  7. Is it safe to let an AI agent or AI browser log in to my email, bank or shopping accounts?
  8. When do AI-generated ads backfire, and how do founders avoid the AI slop trap?
  9. Do AI-made ads actually perform, or is it hype?

Read with it

  1. The single most important security idea for anyone deploying agents. simonwillison.net Article The lethal trifecta for AI agents Simon Willison
  2. Anthropic on letting Claude act in the browser without approving each step, with a safety classifier checking every action. claude.com Article Claude in Chrome is generally available Anthropic
  3. How an always-on agent is fenced in: its own sandboxed computer, read-only background research, auto-review of actions and... openai.com Article How we build safety, security, and privacy into dots OpenAI
  4. A worked demonstration of a hidden Reddit comment steering an AI browser into a signed-in email account. brave.com Article Agentic Browser Security: Indirect Prompt Injection in Perplexity Comet Brave (Artem Chaikin and Shivan Kaul Sahib)
  5. Anthropic's research note on how it trains and screens a browsing agent against hidden instructions. anthropic.com Article Mitigating the risk of prompt injections in browser use Anthropic
  6. The same argument in shareable form for your team channel. simonw.substack.com Article The lethal trifecta (newsletter edition) Simon Willison
eChai Partner Brands The partnership →