One thought is once it can touch the underlying system, it can provision resources, spawn processes, and persist itself, crossing the line from tool to autonomo

One thought is once it can touch the underlying system, it can provision resources, spawn processes, and persist itself, crossing the line from tool to autonomous entity. I admit you could do that in a browser shell nowadays, just maybe with more restrictions and guardrails. I don’t have any strong opinions here, but I do think a lower cost to escape the walled gardens agi starts in will be a factor