best part is, if you actually know what you're doing, you cna absolutely get it to find bugs/vulns/etc. so it just really about preventing long horizon agentic tasks or people who don't know what they're doing or those who are doing legit non-offensive security sfuff