Someone like an AI coding agent perhaps ? This is the type of thing Prompt injection was made for.

No OS is perfect. The awkward rollout for this bug fix is proof of that.

Root access does not typically add anything interesting, for a desktop system. All the valuable stuff is already owned by the single user.