Operating systems should restrict AI agents' access to user data by default