Comment by rst

One partial mitigation is to ask it to use plan mode -- and then very carefully review the plan before allowing it to execute.