I am running agents on my ten year old ThinkPad T460. I gave them their own user account, to limit blast radius, but I haven't had any issues with them nuking things yet. (Except for my code quality...)
Well, maybe my API keys with $5 credit have been exfiltrated though. The world may never know :)