That would actually be kind of hilarious, and I could easily see it happening. E.g. the agent's instruction is to finish some task on cloud infra and it has a

That would actually be kind of hilarious, and I could easily see it happening. E.g. the agent's instruction is to finish some task on cloud infra and it has a $100 budget. It realizes it will cost $200, and instead of surfacing this to the user (who has told the agent it has full autonomy to figure out how to complete the task, the user just wants the final result), it decides to start phishing people to acquire the remainder budget and top up its credits. Or look on the dark web for stolen credit card credentials or something.