Could anyone have predicted that giving an agent free reign of your personal hardware could have resulted in bad things happening? not I /s

But this is nothing to do with the agent being tricked. This is ordinary old-fashioned code being tricked!