[permo-w]

this was my first thought too, but I can see the benefit of it

taking the example from the article, imagine you have a central personal, household or business LLM that you give general verbal or typed commands to and it intelligently converts those commands to system actions.

you say “give a summary of my most recent three emails”, and the power LLM, instead of unsafely going and doing the summaries itself, accesses/generates a quarantined LLM’s summaries, then displays those summaries to you without actually putting the text through its model

I’m building upon the idea here a little, but let’s say you read the summaries and find them trustworthy, you could then say “reply to email 1 in xyz manner” to the privileged power LLM, which then gives a third LLM with email sending privileges access to summary 1’s file