It's not security related. If you aren't running agents in a sandbox today, that's a "you" problem.

It's purely architecture/design related and the last thing anyone wants is coming back at the end of the day to find their agent didn't make progress because it was stuck on a response.

You can always redirect the agent or scrap its work, you can't undo the lost time.