Microsoft is transitioning to Windows 11 with the introduction of an "agentic OS," featuring experimental components called Agent Workspace, currently available to select Windows Insiders. These agentic features will be disabled by default due to potential security risks, including cross-prompt injection (XPIA) that could allow unauthorized access to user files. When activated, agent accounts can access the user profile directory, which raises concerns about data exfiltration and malware installation. The AI applications, including Copilot, will have visibility into the entire display, prompting users to consider privacy implications. Agent workspaces are designed to provide scoped authorization and runtime isolation, allowing users to manage access to files while using their devices. However, initial user reactions have been mixed, with ongoing concerns about security and functionality.