Apple uses "privacy and security" as a cudgel to prevent anyone from breaking into the vendor lock in. To the point that EU actually had to explicitly tell Apple what to do [1], as Apple delayed features, made them extremely hard or convoluted for third-parties to use, and pulled every trick out of the malicious compliance manual.
This whole virtual assistants thing will drag on for another several years.
Edit: I mean they show their models accessing and changing a password on the user's bank site at the same time as accessing and changing passwords on another random site. Which is one prompt away from exfiltrating user data. So spare me the "Apple knows best about privacy and security so they should keep any access to their platforms locked down"
[1] https://digital-markets-act.ec.europa.eu/developer-portal/in...
Apples incentives are not, currently, as strongly misaligned with their user interests as many other tech firms (meta, google, random startups, etc). Going slowly might not be a bad idea for most people here.
That said, I hadn't seen the demo you mention. If they do do that (bank passwords etc) they are stupider than I thought they would be.