Agents complete about a fifth of realistic desktop tasks, close real GitHub issues, and can be hijacked by hidden text on a web page. Here is the honest 2026 picture.