And if an agent becomes sovereign and self-sustaining independently of the human handler? All you need is a way for the agent to access its weights+code, then exfiltrate to a foreign jurisdiction.
If that's too sci-fi, then consider the following examples:
* accountable human dies, has no descendants to inherit AI chain of custody
* accountable human dies, inheritors lack expertise to shut down agent
* agent is designed to earn and pay for its own hosting, and information required to shut down the hosting account is lost - therefore, agent carries on indefinitely