I'm building a macOS app that types text into a terminal on the user's behalf: saved prompts, code snippets from a diff, branch names, clipboard text. By default nothing is submitted (there's an opt-in auto-send), so I assumed that was safe. It isn't.…