Setting it up that way is a choice a user would have to make. Just set it up on an oauth or budgeted api and not be an idiot. Setup additional guardrails in OC if you think are necessary.

Yes.

All new technology has issues. Figure it out.

Especially if you're spending $3k per month on inference, have the model fix the agent.

I suppose the idea is to wait for someone else to productize it.

Lazy.