If it's a tool and you are in control of it, it extends your individual agency.

If it has its own agency to do things behind your back, you don't control it and it's not a direct extension of your agency.

That means that to rely on it you must trust it.

If the AI has a memory and agency and access to your tools, then you have to trust it.

If it's just an amnesic, neutered endpoint you don't need to worry about it; you can treat it like a tool.