Against an "agentic attack" and compromised credentials, one should be paranoid about latent vulnerabilities [1]
[1] eg "Robin Hood and Friar Tuck", poisoned compiler, etc. https://news.ycombinator.com/item?id=26553390