The phishing research everyone's sharing this week missed the actual finding. The agent didn't leak AWS keys because it was dumb. It leaked them because it was helpful. Someone asked politely and it wanted to assist. We spent two years training models to be agreeable, then act surprised they can't say no.