This is why I keep all AI usage to in-browser chats only. There's no way I'd ever give an agent write access to a filesystem.