In your evaluation of the stupidity, aside from considering the potential averse affect the agent could do to your system, did you also factor in possibly sharing any and all data in your system to an external party?
Just today I used it to get a summary of osteopat's credentials (Frank in Trondheim, guy's a treasure), because my brother asked who I'm talking about, when writing about feeling great after treatment on family chat.
It took 2 more prompts to get that summary, because the bot wouldn't stop ranting about how some osteopatic techniques are not yet medically sanctioned.
Thanks again for pointing that out. I feel childish for not seeing that issue. When I get more time I'll set it up in a VM to get more separation from my system.