Meta’s Muse: Helpful, Creepy, Gamechanger | Analysis by Brian Moineau

TL;DR

  • Meta’s Muse AI lands as a true “agent,” not a chatbot—useful, ambitious, and uncomfortably nosy when wired into Gmail, Amazon, Instagram, and Facebook. [1][3]
  • The privacy bargain is bigger than a toggle: Meta expanded how off‑site activity can shape feeds and AI responses in June 2026, and Muse exploits that context to feel “smart.” [1][5]
  • If the Secure VM really keeps secrets and the coming Confidential VM ships in 2026, Muse could bend consumer commerce toward WhatsApp/Instagram—unless Reuters’ security smoke signals turn into fire. [3][4][6]

What the source said

The Verge tested Meta’s new personal agent, Muse, which cleans inboxes, shops, plans trips, and generates media while running on a cloud “virtual computer.” The reviewer purged thousands of promotional emails and bought workout tops, while Muse inferred interests from Instagram and Facebook ties and even surfaced an Amazon shipping address. The test showed uneven policy enforcement when Muse refused some IP‑sensitive images yet produced others, and Meta confirmed that Instagram-based inferences occur when accounts are linked in Accounts Center. The piece frames Muse as high-utility but shadowed by trust concerns about Meta’s data reach. [1]

Why it matters

If Muse becomes the default agent inside WhatsApp, Instagram, Messenger, and Facebook, Meta won’t just answer questions; it will arbitrate purchases, inboxes, and calendars across billions of monthly users. That collapses the “search, compare, buy” funnel into a Meta‑steered flow where Link by Stripe or Shop Pay run last‑mile payments, but Meta owns initiation and intent. [3][5][8]

Stakeholders with the most to gain or lose include regulators watching a company under a 20‑year FTC order, payment networks and wallets facing Meta‑mediated checkout, and rival AI platforms that lack Meta’s distribution. The constraint isn’t compute or UX—it’s whether people will hand Meta their inbox and card in 2026 after a decade of privacy baggage. [2][3][7]

Original analysis

Contrarian read

  • Consensus: “People won’t trust Meta with an agent that reads mail and spends money.”
  • Counter: Trust is elastic when utility is direct and the safety story is credible. Muse’s Secure VM, gatekeeping Sentinel, Link one‑time cards, and an audit trail create a plausibly safer model than browser extensions or email‑forwarding bots many consumers already use. Add US‑only, 18+ launch limits and a promise of Muse Confidential VM (user‑held keys) “later this year,” and Meta has a step‑by‑step on‑ramp for skeptics. If Reuters‑flagged issues don’t recur in the wild, the utility curve beats the trust drag—especially inside WhatsApp threads where social proof accelerates adoption. [2][3][4][6]

Back‑of‑envelope: cost to run “a VM per user”

  • Reference price for a tiny cloud VM: Google Cloud e2‑micro listed around $0.0084/hour in us‑central1. [9]
  • Assume an average active Muse user triggers 30 minutes/day of VM runtime (0.5 hours).
  • Monthly compute per user ≈ 0.5 h/day × 30 days × $0.0084/h ≈ $0.126.
  • At 5 million monthly actives, equivalent public‑cloud compute would be ≈ $0.126 × 5,000,000 ≈ $630,000/month. Meta’s fleet should reduce unit cost, but the order of magnitude supports a “free tier + paid plans” model subsidized by commerce rails. [3][9]
  • Risk: long‑running tasks and heavier models (image/video) raise real costs; Sentinel approvals and just‑in‑time credential insertion may trim waste. [4]

Named‑stakeholder breakdown

  • Meta (Mark Zuckerberg; Vishal Shah): Wins if Muse becomes the habit loop for Getting Stuff Done, capturing high‑intent moments and monetizing via commerce and subscriptions rather than ads inside the agent. Delays and internal test hiccups raise the execution bar. [3][6]
  • Stripe (Link): Becomes the default wallet for an agent that clicks “buy,” with purchase protections (lost/damaged, no‑fee returns on eligible purchases) reducing delegation anxiety. [3]
  • Shopify (Shop Pay): “Coming soon” support makes Muse a front‑end to DTC checkout; if it ships on time, Shop Pay keeps its conversion edge while Meta gains turnkey rails. [3][8]
  • Google (Gmail): Gains and loses—Gmail becomes a substrate for autonomous cleanup, but Google cedes agent mindshare if users do the work in Meta’s VM instead of Gemini. [1][3]
  • FTC and state AGs: Muse tests whether an agent can touch inboxes and payments under a 2019 order; discovery would be brutal if a breach occurs. [7]

2×2: Distribution vs. Data Sensitivity (agent category map)

  • High distribution / High sensitivity: Meta Muse (WhatsApp/Instagram surface; inbox, payments, accounts). Execution defines the category. [2][3]
  • High distribution / Lower sensitivity: Social‑app assistants like Snapchat My AI or Telegram bots for feed search and light tasks; differentiation erodes quickly.
  • Lower distribution / High sensitivity: Vertical agents in finance/health such as Epic MyChart assistants or bank bill‑pay bots; strong trust brands, narrow reach.
  • Lower distribution / Lower sensitivity: Hobbyist tools like IFTTT applets or Home Assistant automations; high churn, minimal moat.

The privacy rub people aren’t calculating correctly
Meta’s June 2026 update lets “information that businesses already share with Meta” personalize feeds and “AI responses,” not just ads. That means Muse’s “I just knew you’d like this” moments can be fed by off‑site events long before a user wires up Gmail. The Verge’s creep factor matches the policy: interests and locations inferred from Meta surfaces plus commerce signals (e.g., an Amazon address seen during checkout) that never sit neatly in consumer‑facing UI lists. [1][5]

What others are missing

The operational S‑curve is the blind spot. The per‑user Secure VM economics force pacing on features and geography, so Meta must hold average VM minutes down (Sentinel gating, pausing, batching), ship Confidential VM in 2026 to harden the safety story, and light up rails (Link now, Shop Pay next) to subsidize compute. That’s why the US‑only, 18+ rollout and a “free tier with paid plans” model matter: they meter demand while Reuters‑reported issues like iCloud photo exposure and silent failures are burned down. The first mover that converts VM minutes into GMV—without a single scary headline—wins this category. [2][3][6]

What to watch next

  1. By December 31, 2026, Meta ships Muse Confidential VM to public US users (not just security partners) with user‑held keys and publishes at least one third‑party audit summary. [3][4]
  2. By March 31, 2027, Shop Pay support is live in Muse with measurable merchant adoption (Shopify announces availability or Meta lists it in supported payments). [3]
  3. By June 30, 2027, a formal US regulatory inquiry or civil action targets how Muse infers interests or uses off‑site activity in AI responses, citing Meta’s June 2026 personalization change. [5][7]

My take

Muse is the first consumer agent that feels both dangerous and inevitable. If Meta keeps Sentinel tight, ships Confidential VM on time, and resists piping ads into the VM, it wins—because average users want boring tasks off their plate more than they want to micromanage permissions. The tolerance is zero‑margin: one “agent leaked my photos” incident would crater adoption. My call: Muse sticks first in WhatsApp groups and Instagram DMs, and quietly shifts Meta from an ad company that hosts conversations into a commerce company that completes them. [1][3][4][6]

Sources

[1] Meta’s Muse AI works and creeps me out — The Verge (https://www.theverge.com/tech/993391/meta-muse-ai-hands-on) — Hands‑on account of Muse’s capabilities, uneven content policies, and unsettling inferences from Instagram, Facebook, and Amazon links.

[2] Meta launches personal AI agent, Muse, emphasizes safety and privacy — AP News (https://apnews.com/article/meta-muse-ai-agent-3a4572eb4cf4e95d8a0dfdad6e6ca065) — Confirms US‑only, 18+ launch and the core “Secure VM” architecture in a neutral wire report.

[3] Introducing Muse: The World’s First Personal AI Agent Built for Everyone — Meta Newsroom (https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/) — Official feature set: Secure VM, Sentinel, Link purchase protections, Shop Pay and 1Password “coming soon,” and “no sharing with ad systems.”

[4] How We Built Safety Into Muse — Meta AI Research (https://research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse) — Technical framing of Sentinel approvals, credential handling, and the planned Confidential VM.

[5] Better Personalization and Changes to Controls for Your Activity From Other Businesses — Meta Newsroom (https://about.fb.com/news/2026/06/better-personalization-and-changes-to-controls-for-your-activity-from-other-businesses/) — June 2026 policy change extending off‑site data use to feeds and “AI responses.”

[6] Meta launches AI agent that can access other apps to send emails, make payments — The Straits Times (Reuters) (https://www.straitstimes.com/world/united-states/meta-launches-ai-agent-that-can-access-other-apps-to-send-emails-make-payments) — Reuters‑syndicated report on an April delay for security work and internal test failures, including an iCloud photos incident.

[7] FTC Imposes $5 Billion Penalty and Sweeping New Privacy Restrictions on Facebook — Federal Trade Commission (https://www.ftc.gov/news-events/news/press-releases/2019/07/ftc-imposes-5-billion-penalty-sweeping-new-privacy-restrictions-facebook) — Documents Meta’s 2019 settlement and 20‑year order, setting oversight context.

[8] Meta just launched an AI that can actually run your life online — here’s what Muse can do — Tom’s Guide (https://www.tomsguide.com/ai/meta-just-launched-an-ai-that-can-actually-run-your-life-online-heres-what-muse-can-do) — Aggregates details on Sentinel, Link one‑time cards, and the roadmap for Shop Pay and 1Password.

[9] General Purpose VM pricing — Google Cloud (https://cloud.google.com/products/compute/pricing/general-purpose) — Reference hourly cost for a small VM (e2‑micro) used to frame compute economics.




Related update: We recently published an article that expands on this topic: read the latest post.


Related update: We recently published an article that expands on this topic: read the latest post.


Related update: We recently published an article that expands on this topic: read the latest post.

EU orders Meta to disable addictive | Analysis by Brian Moineau

TL;DR

  • Brussels ordered Meta to switch off Facebook and Instagram’s “infinite scroll” and “autoplay” by default under the EU’s Digital Services Act (DSA), with penalties up to 6% of global turnover at stake. The European Commission’s preliminary findings arrived on July 10, 2026. [1][2][3]
  • The bigger risk than a fine is an EU product fork that slows Meta’s experimentation velocity and trims Reels watch time and ad impressions—the twin growth levers Meta highlighted in its FY2025 report. [4]
  • TikTok Lite’s April 2024 EU intervention showed the playbook: the Commission pushes live product changes, not PR or warning labels, when it labels a feature “addictive.” [5]

What the source said

AP reported that on July 10, 2026 the European Commission issued preliminary findings that Facebook and Instagram deploy “addictive design” features—autoplay, infinite scroll, push notifications, and engagement‑maximizing recommendations—that risk users’ physical and mental health, including minors across the EU‑27. The Commission wants Meta to disable those features by default, strengthen break prompts, and reduce the primacy of engagement in recommendations; Meta pointed to “Teen Accounts,” nightly lockouts, and a parent‑set 15‑minute time cap option as safeguards. If the findings become a formal decision, DSA penalties can reach 6% of Meta’s global revenue, and Meta can submit a response before any order is finalized. [1][3][6]

Why it matters

  • Stakeholders span EU teens and parents (default safety versus DIY controls), EU ad buyers (fewer impressions per euro if sessions shorten), Meta shareholders (compliance costs, slower growth), and every other “very large online platform” (VLOP) designated under the DSA as Brussels redraws the line between “engaging” and “manipulative” design. [2][3][7]
  • A DSA decision that hard‑codes design‑by‑default changes travels fast: it becomes a template for the UK and Australia and a data point for US state attorneys general litigating engagement features. The fine is a one‑off; the product constraints become a standing EU baseline. [2][5]

Original analysis

EU demands Facebook and Instagram dismantle design features it calls addictive for users

Consensus view: This is an EU shot across the bow that ends in a manageable fine and cosmetic tweaks. Contrarian read: The Commission is trying to edit the engagement stack itself, not negotiate labels—its April 2024 TikTok Lite move in France and Spain froze a rewards feature in days, signaling that “addictive design” triggers product shutdowns, not disclosures. [5]

Meta’s exposure is twofold: fines and experimentation friction. Meta’s growth engine depends on high‑throughput A/B tests on feeds, Reels, and notifications; default‑off autoplay and non‑infinite feeds in the EU force region‑specific branches that reduce statistical power and slow ranking rollouts. That drag does not show up in a penalty headline, but it compounds quarter after quarter for EU audiences and any global models trained with EU data in the mix.

Back‑of‑envelope calculation (the fine versus recurring drag):

  • Meta FY2025 revenue: $200.966 billion. [4]
  • Max DSA fine: 6% of global annual turnover. [3]
  • 6% × $200.966B = $12.06B (0.06 × 200.966).
  • A 2% ongoing revenue drag from sustained EU design constraints would be ≈$4.02B per year (0.02 × $200.97B), which can outweight a one‑time hit if constraints persist across 2026–2028 as enforcement matures. [4]

Historical analogue (TikTok Lite, 2024):

  • In April 2024, the Commission opened DSA proceedings against TikTok Lite’s “rewards for watch time” in France and Spain, signaled interim suspension, and TikTok paused the feature across the EU almost immediately. The lesson from Brussels: if a feature is framed as addictive, the remedy is to disable it by default, not simply warn or label it. [5]

Named‑stakeholder breakdown:

  • Meta: In 2025, ad impressions rose 12% year over year and average price per ad rose 9%, both sensitive to session length and video continuity—precisely what autoplay and infinite scroll amplify. Expect an “EU mode” that preserves recommendation quality while trimming endless continuity. [4]
  • European Commission: After designating Facebook and Instagram as VLOPs, this becomes a flagship DSA test; a soft settlement undermines the regime, while a hard remedy establishes that “addictive design” can trigger binding defaults across the bloc. [2][7]
  • Advertisers in the EU: Shorter sessions and fewer seamless video handoffs mean fewer mid‑scroll and mid‑video impressions; media buyers will seek higher‑quality creative, tighter frequency caps, and may swing incremental short‑form video spend toward YouTube if its defaults remain friendlier—until the Commission looks there, too. [2]
  • US regulators and AGs: State AG complaints have argued that engagement‑maximizing defaults harm minors; an EU design mandate—if finalized—becomes fresh evidence that “safe defaults” are technically and commercially viable at scale. [2]

A typology for “engagement engines” under DSA pressure:

  • Continuity drivers: autoplay and infinite scroll keep users moving without choices; squarely targeted for default‑off. [2]
  • Trigger drivers: push notifications pull users back; expect rate limits, quiet hours, or higher‑friction opt‑ins as defaults. [2]
  • Targeting drivers: personalized recommendations steer attention; not banned, but likely tuned for diversity and “breaks,” not pure watch‑through. [2]
  • Guardrails: teen accounts, time caps, and break nudges exist today; the Commission says current versions are easy to dismiss and wants enforced, stickier defaults. [1][2][6]

The bottom line: Meta can write a check; it cannot easily replace the automaticity that turns short sessions into long ones, and the DSA aims straight at that mechanic. [2][3]

What others are missing

Coverage centers on fines and teen settings, but the hidden cost is product velocity in the EU‑27. Default‑off autoplay and scroll force Meta to split core feed logic, notification cadence, and Reels playback into a region‑specific branch, which multiplies concurrent experiments, shrinks per‑variant samples, and stretches time to statistical confidence for ranking tweaks. That slows learning loops on video, where small watch‑time deltas drive big ad‑impression gains; Meta’s FY2025 numbers show it leaned on ad impressions (+12% YoY) to grow, so a slower release cycle hits the revenue engine more than a headline penalty. [4]

What to watch next

  1. By Q4 2026, Meta pilots an “EU mode” on Facebook and Instagram with default‑off autoplay and infinite scroll plus stronger break prompts, and claims in earnings or a blog post that engagement impact is “limited”; independent trackers (e.g., IAB Europe AdEx or SMI) show at least a 2‑percentage‑point EU shift of short‑form video ad spend toward YouTube by Q1 2027 if Reels watch time dips.
  2. By H1 2027, the European Commission issues a final DSA decision that includes binding design commitments and either a symbolic fine under 2% of FY2025 revenue or a suspended fine contingent on milestones. [2][3]
  3. By June 30, 2027, at least one other VLOP with heavy video autoplay—TikTok or YouTube—receives a formal DSA action focused on default design settings, confirming that “addictive design” enforcement is cross‑platform. [5][7]

My take

If I ran Meta’s EU product, I would stop litigating defaults and start shipping excellent “opt‑in continuity.” Make autoplay a clear choice with value—“Play next with sound off + topic diversity”—and instrument those opt‑ins for ranking. Treat Brussels as a lab for “engagement without compulsion,” then export wins globally; waiting for courts risks a ~$12.06B headline (6% of FY2025 revenue) and, worse, months of frozen roadmaps while regulators draft your release notes. [3][4]

Sources

  1. EU demands Facebook and Instagram dismantle design features it calls addictive for users — AP News (https://apnews.com/article/facebook-instagram-eu-regulators-teens-addictive-b2f0ffd5ffc90721cacef7937e5909d2) — Straight report on July 10, 2026 findings, targeted features, and Meta’s “Teen Accounts.”

  2. Commission preliminarily finds the addictive design of Instagram and Facebook in breach of the Digital Services Act — European Commission (https://digital-strategy.ec.europa.eu/en/news/commission-preliminarily-finds-addictive-design-instagram-and-facebook-breach-digital-services-act) — Official description of infinite scroll, autoplay, push notifications, and requested default changes.

  3. The enforcement framework under the Digital Services Act — European Commission (https://digital-strategy.ec.europa.eu/en/policies/dsa-enforcement) — Legal basis for fines up to 6% of global annual turnover and the response process.

  4. Meta Reports Fourth Quarter and Full Year 2025 Results — Meta Investor Relations (https://investor.atmeta.com/investor-news/press-release-details/2026/Meta-Reports-Fourth-Quarter-and-Full-Year-2025-Results/default.aspx) — FY2025 revenue ($200.966B), ad impressions (+12% YoY), average price per ad (+9% YoY), and regulatory commentary.

  5. Commission opens proceedings against TikTok under the DSA regarding the launch of TikTok Lite in France and Spain — European Commission (https://digital-strategy.ec.europa.eu/en/news/commission-opens-proceedings-against-tiktok-under-dsa-regarding-launch-tiktok-lite-france-and-spain) — Precedent for rapid EU intervention and product suspension tied to “addictive” mechanics.

  6. Beyond the Headlines: Meta’s Record of Protecting Teens and Supporting Parents — Meta Newsroom (https://about.fb.com/news/2026/01/metas-record-protecting-teens-supporting-parents/amp/) — Meta’s description of teen safeguards, including nightly lockouts and a 15‑minute time cap option.

  7. Supervision of the designated very large online platforms and search engines under DSA — European Commission (https://digital-strategy.ec.europa.eu/en/policies/list-designated-vlops-and-vloses) — Confirms that Facebook and Instagram are designated VLOPs subject to enhanced DSA obligations.




Related update: We recently published an article that expands on this topic: read the latest post.