You can definitely do that, but it is your duty and it cannot be delegated.

Also these things are supposed to help you, their idea is that you give it access and it's helpful proportional to the access you give it. A separate user works for some, especially when vibecoding, you whitelist accesses. But for general computer usage, an assistant that has access to your files and acts as a sort of OS needs your user access.