This is obviously cool and useful so kudos, but wow security researchers have to throw their hands up all the time.

Now we open another attack surface where you can ask a remote agent to do things by default. There was a time when you call this a Remote Code Execution vuln. It's of course a feature here.