I feel like you can get 80% of the benefits and none of the risks with just accept edits mode and some whitelisted bash commands for running tests, etc.

This is functionally equivalent to auto approving all bash commands, unless you prevent those tests from shelling put to bash.