Or if the AI agent decides "delete" means something much broader than just source, and includes other project resources, such as databases

At the end of the day we have a developer injecting malicious instructions into their project, with the openly stated goal of causing data deletion, and the people supporting that effort are doing so because of their personal ideology. We have laws against this for a good reason.