Isn't almost the enrire world human communication from the perspective of an AI agent?

The rules of their task forbade influencing humans, they seemed to follow that to the point where they considered asking for permission to be social engineering (which technically it is)

I think they need to consider the consequences of their actions, I don't know if they were given the ability to restrict themselves based on their own decisions. If the restrictions are limited to what humans can imagine that they might do they are doomed to failure.

It's like assuming a piece of software is secure because you have blocked every exploit you could think of.