Comet AI browser can get prompt injected from any site, drain your bank account

Presumably not if you don't give your bank account credentials to Comet. I'd be extremely cautious about which credentials Comet gets access to. Basically only accounts that aren't tied to anything vital.