A Gemini-powered smart home agent misread a dentist appointment invite and ordered cupcakes instead. Not a hypothetical, not a red-team exercise, just a normal calendar entry that got interpreted as a commerce instruction and turned into an actual order. Forkast's writeup uses this alongside the Meta Muse iCloud photo exposure and the DJI Romo token leak to make a simple point: consumer smart home platforms have none of the runtime protection that enterprise agent deployments are starting to g...