I would not let non-engineers run Cursor Agent on production without guardrails. Agent mode can change multiple files fast. Fast is dangerous without git discipline.
Safe uses
Docs, content files, marketing components in a branch.
Risky uses
Auth, billing, database migrations.
Rules
Branch only, small tasks, human review, never on Friday.
Agent mode is power tools for operators who respect version control.