This looks like a variation of the Peter principle. That is, your agent is a competent agent, so you give it more access. And you keep giving it more access until one day it's an incompetent agent with no restrictions. But at least you can cap it off with an LLM-written twitter post blaming everyone but yourself for deleting your database or whatever.
https://en.wikipedia.org/wiki/Peter_principle