Ensuring security, decentralization, and privacy is still quite a challenge...
How do you approach this issue? Especially in adversarial situations where testing is impossible (e.g., your agent sees the other party's ENS profile, which includes a jailbreak causing your agent to send all your coins to them).
Does every large transaction require manual confirmation? Doing this is much better than nothing, but it's still not perfect... It should also be explained to people what a transaction does... It's a complex UX issue.