John Gruber warns Meta's Muse is riskier than it looks
On 25 September 2026, Simon Willison's blog quoted an essay by commentator John Gruber titled "Muse Looks Cute, but Looks are Deceiving," which argues that Meta's Muse is more powerful, and more dangerous, than its friendly presentation lets on.
Gruber describes Muse as technically groundbreaking: each user gets their own entire persistent Linux virtual machine running in Meta's cloud, an architecture he calls the first consumer-accessible agentic AI system. Meta wrapped that capability in an easy-to-install, easy-to-use package and presents Muse literally as a cute mascot, execution Gruber credits Meta for pulling off well.
His worry is that the packaging obscures the underlying power. He calls it "a genuinely open question" whether consumers understand what that power actually means, and compares Muse to a power saw: someone who buys a saw capable of severing fingers knows exactly what they are getting, but Muse's danger is not nearly as obvious from its cute interface. Gruber adds that he does not think people realize how powerful, and therefore dangerous, Muse is, especially when it is running on a Mac.
The quoted excerpt does not spell out what specific tasks or actions Muse can carry out beyond running as a persistent VM, nor does it recount any incident that prompted the warning. It reads as Gruber's own assessment of the gap between how Muse looks and what it can do, republished by Willison without additional commentary of his own in the excerpt.
Key facts
- Simon Willison's blog quoted John Gruber's 25 September 2026 essay "Muse Looks Cute, but Looks are Deceiving" about Meta's Muse.
- Gruber says each Muse user gets their own persistent Linux VM running in Meta's cloud and calls it the first consumer-accessible agentic AI system.
- Muse is packaged as easy to install and use, and presented literally as a cute mascot, which Gruber says Meta executed well.
- Gruber questions whether consumers understand Muse's power, comparing it to buying a power saw that can sever fingers.
- Gruber says people do not realize how powerful and dangerous Muse is, especially when it is running on a Mac.
Why it matters
Gruber frames Muse as the first consumer-accessible agentic AI system, arguing that pairing serious technical power (a persistent per-user Linux VM in Meta's cloud) with an approachable mascot-style interface creates a mismatch between how safe a product feels and how much it can actually do, a mismatch he says most consumers will not register.
Who it affects
Anyone who installs or considers installing Muse, and Mac users specifically, since Gruber says the danger is compounded when it is running on a Mac. It also bears on Meta, as the company responsible for how the product's risk is communicated to consumers.
How to use it
The quoted material gives no setup instructions, pricing or feature list; it functions as a warning rather than a guide. The one usage detail offered is that Muse is easy to install and use, and is presented to users as a cute mascot rather than as the powerful agentic system Gruber argues it actually is.
How solid is it
The account rests on a direct quotation of Gruber's own essay, republished with its title and byline intact and its wording preserved. The available excerpt does not include a response from Meta, further technical detail about what Muse can do, or a specific incident that triggered Gruber's warning.
Risks and caveats
Gruber's argument rests on his own judgment rather than a documented failure; the excerpt does not describe anything Muse has actually done wrong, only that its power outstrips what its cute presentation communicates. He singles out Mac use as a particular danger without explaining why.
“If you buy a power saw that can cut your fingers off, you are almost certainly aware that you are buying a power saw that can sever your fingers.”
— John Gruber, "Muse Looks Cute, but Looks are Deceiving"