They're trying to bolt an unpredictable language engine onto an OS whose security model is based on total predictability.

It's basically a rootkit that you consent to installing. No audit logs will help after the agent has already exfiltrated your data because a malicious prompt was hidden in a white pixel on an image it was analyzing