Fair but my intent was to hit at something else. It's more about how to delegate a portion of a system over to an agent. In an AGI scenario, there's no world in which I just hand over my computer and browser with all my logins to an agent - just like I'd never do that with a human. It's insane. So whether you're using an AGI or not, there's going to need to be some change to software it's using such that it can be used in a safer, delegated way.
Like, how do you get your human assistant to book you a flight? They have a corporate credit card with limits on it where they can't spend on just anything. I'm guessing it would be the same thing. You'd need to implement safeguards so the agent can't screw up