Why it matters
Google integrated computer use into Gemini 3.5 Flash so agents can act across browser, mobile, and desktop environments. Optional enterprise safeguards can require confirmation for sensitive actions or stop a task when indirect prompt injection is detected.
My takeaway: Built-in computer use expands the model’s action surface. Pair model-level defenses with sandboxing, least-privilege access, explicit approval for irreversible actions, and independent monitoring that can halt compromised sessions.