It's about balance between security and getting things done. When I give an AI a task, I say: do this and this, but your boundaries are here and here. It should only do what it's allowed to. Even in simple cases, like running separate sessions on different tasks, they shouldn't be able to touch each other's work.

One more thing on balancing security and speed: I run regular audits and vulnerability checks, so I know the gaps are actually closed.