It literally can't — with 2-of-2 fast vaults, every transaction must be confirmed by the user.

As a result, this is an extremely safe wallet to build an agent around.