Yeah imagine giving an AI root access to the server with your production database on it. Now I really want to try that in a VM to see what will happen. Even odds at some point it tries to rm-rf everything.
Nobody is considering giving AI unrestricted access to anything yet. Code written by AI is reviewed by humans, and I would be shocked to hear that sysadmins are considering letting AI agents execute arbitrary commands.