The Part of Your App You Can Hand to Something You Don't Trust
Sometime in the last year, "the agent will just edit the file" stopped being hypothetical and became a normal workflow. Point an agent at a config, a document, or a blob of state, and it reads, edits, and writes it back, with no UI in between.
That's useful. It's also a trust problem most formats were never built to handle.