there have been a lot of attempts to make products like these but this kinda product almost always only one problem. nobody really is sure about the access privileges it requires to operate and what it does on its backend with such privileges

That's an interesting approach. For us, we give it read-only privileges which gives the agent the context of your infrastructure, without giving it the capabilities to break things. But I do see a world where we give it more access, but add additional safeguards.