It is indeed a disaster waiting to happen. Figuring out a way to run agents safely is apparently a harder problem than getting to AGI :)