Agent should ask, not comply
Sites like the SEC and Wikipedia ask bots for contact info in the User-Agent, but Claude should ask the user before sending any personal data to a third party.
PII shouldn't be in context
The account email never belonged in the system prompt, and agents need real OS-level sandboxing rather than text instructions or after-the-fact plugins.
Anthropic's response looks sloppy
Critics called the week-long fix, the opt-out plugin and the 'haha' reply unserious, and some raised GDPR breach-reporting duties.