If you have a custom agent in a product, then it needs isolation to be sure to protect the customer data.

People are running custom agents that are able to run custom code in production just like that ?

I’d personally opt for SELinux in such cases