One poisoned spreadsheet. Twelve workbooks silently exfiltrated. A human-approval toggle that does absolutely nothing. And the official ChatGPT extension installed by a hundred and eighty-five thousand Google Sheets users in less than a month.