> letting an llm control your tabs in front of you is a security issue

If it is your's llm, yes. If it is Google's, no.