This is pretty funny in a dark way.
They gave experimental commands full access to their private data. Data deletion is, in fact, the least concerning outcome here.
On the bright side, this is a solid reminder to maintain proper backups.
If this happened to me, I'd just restore from backup and be back up in 20 minutes. That said, I avoid this scenario entirely by running agents in isolated VMs and only mounting the specific directories they need access to.