Giving an LLM access to email is extremely risky