Whitelisting also quite likely doesn't work ("of course I will allow my agent to run find, that can do no harm")

Cool, so it is what I imagined, thanks!