its tough bc I think part of what has made Instinct feel like magic is the same thing that resulted in this outcome - dangerously skipping permissions
I think my expectation as a user here would be that if I gave the assistant a request, and its plan of action violates a site's ToS, or has the potential to, it should lay out the plan for me and get approval prior to implementing