You should not grant AI access to the entire desktop, downloads directory, or shared drive root; for high-risk tasks, only place copies there, and batch renaming, format conversion, deletion, overwriting, and migration operations must be backed up first and then validated on a small sample.