Take a dental clinic with two Google Ads campaigns that connects an AI assistant to the account. Plenty of people will just grant write access and go, figuring preview-before-apply covers most of the risk. I'd keep the first two weeks read-only. Not because the AI will do something wild, but because you don't yet know how it reads your account.
Ask it for a search term report, a conversion summary, and a list of what it would change, then compare that with what you'd have concluded yourself. If it mixes up a brand campaign with a generic one, or misreads which conversion action is primary, you want to catch that before it proposes a bid change. Where do others draw the line, especially people who've been running this for a while?