Both are tools though, and both approaches are needed, just in different times and for different times. Sometimes I need the tool to just fucking do it, regardless of what it is and how stupid it think it is, and other times I need the model to literally refuse and say "No, that's stupid". Unfortunately, I haven't found any models/platforms that can actually execute the second part, only the first part. They're all too weak and sycophantic to be able to do that part it seems, even when you heavily prompt for it with system/developer system prompts they're easily swayed in other directions.