The Belmont analogy is great, but the deeper point is even scarier: most of the industry is giving non-deterministic systems direct access to deterministic infrastructure (databases, shells, email, etc).

Historically we spent decades reducing automation privileges and adding layers of verification. Agents seem to be reversing that trend almost overnight.