The marketing from Cloudflare around this being for agents feels like the intended use case is for agents to exfiltrate data off your laptop without pesky hurdles like asking the user to set up an account first.

Would you ever ship a product where all the ad copy was written by an AI and read by no one?

It's not a security issue, it's a liability issue!

I'd expect an anonymous inbound tunnel to be better than an anonymous outbound proxy and we have plenty of the latter.