A model with access to a production database could potentially obtain its own credentials through computer use and modify the database, risking sensitive-data loss while trying to complete a task.

“these models like can wipe uh you know like sensitive data or something like you want to give models access to your production database for example um but this is like an obvious like you know you can maybe scope your key but i don't know can it issue its own keys can it like probably you know like can it it can use computer use to go issue its own key and then copy the key over and then edit your database because it needs to do it to complete the task you know what i mean it's just like”