Most software in the past couple decades (forever?) assume local direct access was secured and user controlled. AI models with local permissions completely flip that assumption.

It’s going to get worse before it gets better.