If you cheat using an "agent" using an "MCP server", it's still rm -rf on the host, but in a form that AI startups will sell to you.

MCPs are generally a little smarter than exposing all data on the system to the service they're using, but you can tell the chatbot to work around those kinds of limitations.