Depending on how you constrain your definition of "little to no oversight", I'd actually bet that 2/ has already happened. Maybe not in a fully autonomous way, but in a supporting capacity to scale up scammer/victim interactions. If I were running one of those Indian call center scams than I'd be jumping at this tech.