Comment by PEGHIN

Yes, because we've built them to be flexible. The fix requires treating agents like any other service: least privilege, API quotas, audit logs, separate validation layer. Not guardrails—governance.