Kind of, but it's also a test of your own checks and balances; why would you allow the output of a script to allow a new prompt? I get that they have to act based on output, but not that they can change their original assignment.

But even then, just because an AI coding agent deletes all files doesn't mean that that change ends up affecting anything but your local working state.