In a post published on 25th September 2026, Simon Willison collected a quotation from John Gruber about Meta's new AI system, 'Muse,' from Gruber's piece titled 'Muse Looks Cute, but Looks are Deceiving.' According to the excerpt, Muse gives each user 'their own entire persistent Linux VM running in Meta's cloud' and is packaged in what Gruber describes as an easy-to-install, easy-to-use way, presented as 'a cute mascot.' Gruber characterizes it as 'the first consumer-accessible agentic AI system' and credits Meta with having 'done an amazing job with that.' However, he raises a concern about consumer understanding: 'it's a genuinely open question whether consumers have any understanding what this means.' He draws an analogy to buying a power saw, noting that a buyer is 'almost certainly aware' of the risk of injury, and states: 'I don't think people realize how powerful — and thus dangerous — Muse is, especially if it's running on your Mac.' The material available is a single quotation collected by Willison rather than the full original article. The excerpt does not include specific technical safeguards, capabilities beyond the persistent VM, or Meta's own statements on the product.
- Meta's 'Muse' is described as the first consumer-accessible agentic AI system, giving each user a persistent Linux VM in Meta's cloud
- John Gruber argues consumers may not understand how powerful and 'dangerous' the system is, especially when running on a Mac
- The quote was collected by Simon Willison and posted on 25th September 2026
What it means for you
Meta has released an AI system called Muse that can act on its own — an 'agentic' system, meaning it can take actions rather than just answer questions. A respected commentator is warning that it's more capable, and therefore riskier, than its friendly packaging suggests, particularly if you connect it to your own computer. The concern here is about awareness, not a specific proven flaw.
Try this
If you're curious about Muse, install it in a limited, sandboxed way first and don't give it access to sensitive files, accounts, or your primary work machine until you understand what it can do.
Who should care
Individuals tempted to install Muse on their personal Mac, and anyone handling client data or business files who might connect an agentic AI to their working environment.
Skip this if
You're not planning to use Muse and don't run agentic AI tools that can take actions on your own machine.
Sources: Simon Willison — read the original