Comment by sshwarts

It makes sense. I think my response skewed things a bit. The worker can not run wild for exactly the reasons you state. Constraints of the language and the workflow are easy for a human to understand (especially a non-programmer human).

I expect, in general, agents to be writing automation for non-programmers to approve which is another case for why not bash or python.