Will it take actions in a user’s account on its own?

Only reversible ones, settings, rules, and drafts. Sends and destructive or irreversible actions ask the user first, every time.