Thing is, thats fine if you're doing something like working on a version controlled codebase where you can just roll back whatever the agent does if you dont like it. The idea of using a windows computer that had an AI fucking around with system settings and registry entries gives me shivers. Thats before getting into the possibilities of hostile actors managing to prompt your AI to do something like give up sensitive information by getting it to read malicious information on a website.

Ok now try asking it to do something non-trivial and not related to web development and see what happens lol