We’ve always had a problem with least privilege, but users needed to be owned for it to visibly hurt the enterprise.
Kevin didn’t know what to do with the extra creds, but his agent will.
Maybe the first run of the “paperclip” problem will be agents wiping shares to save us..