The likely case is that it almost never does anything harmful. I've never once seen an LLM tell me to run rm -rf /