Nah, if they asked LLM whether that's a good idea it would say no

They just don't care, they did it to make as convenient as possible for the users that don't care either, as they are gonna click accept without looking anyway

I think the agent "eagerness" tuning leaves much to be desired. They are very zealous when performing random tasks, resorting to all kinds of dodgy actions just to get it done. Then you ask them to help you with the security of your own repo, the one you've been adding code to day after day for months, and they go full Gandalf on you: "Thou shall not pass!"