It acts only on what you allow, logs every action, and lets you reverse any of it. Sensitive work holds for your confirmation.