The very first thing in their demo shows Grok logging in with the user's username and password to a website, presumably so it can perform actions and the human can get the blame for them. Apparently this is marketing and not terrifying to people.

It'll ask you to take over its computer to log in:

https://image.non.io/4022ec77-be07-4baa-97e8-ad9d8d9aeb8a.we...

After you do you just tell the bot you're done logging in and it'll keep driving. And yea, it's a separate VM for each bot.

Source: had access for the last few weeks.

dont forget the "Elon-Only Settings" makes it different too https://runtimewire.com/article/grok-bot-s-hidden-elon-only-...

How my bots do it is chrome dev tools or puppeteer or w/e. I've got chrome vnc (for monitoring) and headless X in the container with them. Works pretty flawlessly.