Mainly ergonomics. Deriving all these approval rules is a pain and you're likely to miss something.

> not bash for starters

you'll end up either severely limiting what your agent can do or force it into finding some inefficient workarounds (they can be very creative...)