It's a problem when LLMs can control agents and autonomously take real word actios.