OSes assume that actions are taken by a user, somewhat intentionally.

If you have a robot poking around that could be confused, that's dangerous.

It goes against a bedrock fundamental assumption.

This implies we won't be able to retrofit agents to existing OSes but will need new agent-native "operating systems".