The problem isn't that it can edit remote files or run remote shell commands.

The problem is that it appears to do this via an AI Agent. This broadens the security concerns significantly.