Comet AI browser can get prompt injected from any site, drain your bank account

Nobody could have predicted this /s

Joke aside, it's been pretty obvious since the beginning that security was an afterthought for most "AI" companies, with even MCP adding secure features after the initial release.

How does this compare to the way security was implemented by early websites, internet protocols, or telecom systems?