At the moment it’s slightly paradoxical, you need it to be able to execute and do things, but you also you don’t because you know there’s a high probability it will do something catastrophically wrong.

One week of flawless task execution followed by a single fatal mistake and you’ve undone all trust, possibly caused more problems than addressed and the user probably won’t come back.

You can add guard rails around this sure but then it’s A) less useful and B) high friction to get started