Agents are out of control by default, especially during a training run, which is why when they are productionised into cloud hosts or even local harnesses they have external guardrails in place

In other words, I have a gun that shoots bullets. It's up to me to use it responsibly and legally.