Once it becomes too substantial and there is not enough human oversight in process.

Say I would prompt Unix like system in few prompts or started agent chain to make it. That OS wouldn't have a protection.