I've had agents run `rm -rf`, but it's been on directories that did actually need to be removed. To a certain extent I think the existence of `rm -rf` as a command that runs blindly without any understanding of what it's deleting is the problem.

I've had one sever its own internet connection. Less destructive, also more humorous.

the answer is rm -f `which rm`, yes?