Post #1644703

@janeishly I bet similar vulnerabilities exist in agents running email accounts. If someone is short-sighted enough to let the same agent send and answer emails, then an attacker could potentially start sending email as if it were from that account. Double token bill with a side order of reputational damage.