another commenter raised a fair point: watching the browser is fine for the first ten minutes but attention drops off after that, so what you really want is an allowlist on sensitive actions (sending, posting, paying, deleting) rather than relying on someone staying glued to the screen. that kind of action-level permission gate would make the "walk away and let it work" pitch feel a lot safer.