Answer:
Yes - there are no "guardrails" in the Automox product to prevent changes from being made to a Device by the PowerShell or BASH code in the Evaluation code block. Therefore, take care in ensuring that the Worklet's Evaluation code only evaluates - not remediates, too.
NOTE: Remember that Evaluation code is run during a Device Scan, regardless of whether or not the Worklet is scheduled.