Giving an AI coding assistant file-write permission is like handing scissors to someone extremely smart who occasionally hallucinates.

Most of the time it knows what it’s doing, but every so often it will confidently delete a file it shouldn’t, or set a critical config to a value that looks plausible and is actually wrong. The model isn’t malicious; it just makes mistakes — usually with great confidence.