From a technical point of view? It’s just software. If you give a software with semi-random outputs access to control external tools, it will do semi-random stuff and could cause harm. And since the people that loves these little runner also likes to run hundreds of them concurrently, with the ability to spawn more, they can cause harm real fast with no oversight.

If you don’t give them uncontrolled access to anything though? Not much harm in that. But it’s harder to sell the “this is the future of everything” if you put pesky things like checks and limited capabilities for the sake of safety.

So, nothing unique to AI, except the scale of it.