In this context that probably relates to reducing permissions of the coding agent.

That might be a tradeoff in convenience which one has to assess against the risk. And for that risk assessment, it seems that coding agents with broad permissions are so far used largely without issue by like ten million users.