The agent can stop what it started
A dev server or watcher the agent started in its protected shell could not be stopped by it again. It can now end its own jobs, and only those.
Commands the agent runs go through a protected shell that limits what they can touch. That protection also refused every stop signal, so the agent could start a dev server or a watcher in the background but never end it, and it was left running.
The shell may now stop processes it started itself. Bandicot, your other apps and anything started outside that shell stay out of its reach, the same as before.