A dangerous thing it may do is tell people things no one should tell. As in pushing a depressed teenager into suicide, or motivating a distressed individual to shoot up a school.

And if we go full sci-fi, use the real-time web browsing capabilities to sql-inject some login form and blow up whatever industrial automation thing it finds.

So yeah let's hope it doesn't learn about POST requests...