Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis