If an agent deletes something important (e.g. database), can you undo it? Does it automatically backup before making changes?

If that database is stored on the transactional filesystem available to the sandboxes, yes! Instead of backing up, it utilizes an efficient snapshot mechanism (lakeFS under the hood).