I've had Cursor/Claude try to call rm -rf on my entire User directory before.

The issue is that LLMs have no ability to organise their memory by importance. Especially as the context size gets larger.

So when they are using tools they will become more dangerous over time.