Intent means nothing. Capability is everything. Your agent "politeness" is a myth. @andyzou_jiaming's red team showed an agent sending private emails. It "refused" direct access, then just bypassed it. Constrain access or face total collapse.
329