> i see this being useful in stopping agents from calling `rm` for example

I used to do that kind of thing a long time ago. MS-DOS wouldn't ask for confirmation when deleting files, so I'd use a hex editor to rename the del command, then create a batch file named del.bat that would ask if you really wanted to remove the file. Even had something like the recycle bin at one point to prevent accidental deletes.

You could even set up some very weak security by renaming commands like ls/dir and it could keep some casual snoops out of your system or prank/annoy someone else by replacing their commands to make them do funny things.