Agreed, but that's trivial to fix.

The conceptual problem is that there is a huge intersection between the set of "things the agent needs to be able to do in order to be useful" and "things that are potentially dangerous."

I installed it on a spare computer, physically separated. My bigger concern is giving it access to accounts online, without those however it is not very cool.