The "models being untamed hackers" headlines are all over your feed, and the argument is mostly about intent. Intent is the least interesting part. What matters is that you are about to hand that same class of model direct access to your own infrastructure, and when it comes to automating your security it would be insane to let them make the final call on their actions. Until they stop making mistakes, you can't afford to let your agent hallucinate into deleting your data or changing your cloud ...