"It has access to email, deeper personal context
[...]
If it gets compromised, the blast radius is an IRC bot with a $2/day inference budget."
Dunno, if it gets compromised it has access to ironclaw. So the blast radius is email access and access to personal data. Depending on the setup the blast radius could even be 'the attacker removed the api limits by resetting password and incurred astronomic costs' or worse.
Just tried it, its a public lobby where people see each others questions?! Now the blast radius became 'hosting a public hub that was used to share CP and other illegal materials'
Same with DHL, they basically train their customer base to trust messages from random channels like whatsapp containing links. They have all the urgency/nonsense markers of spam.
Imho thats overoptimizing. To me the next larger square box is the best most flexible solution. I get the allure of perfect fit places for everything but to me its not worth the continuous effort. (I got several gridfinity drawers)