The proliferation of corporate enabled LLM agents means that your user base is busy either directly handing over their credentials to enable integration or your user's LLM agents are grabbing those credentials any way they can. A sprawling dark network of data movement in which every actor maximally exploits whatever access they have.
That means we can no longer treat any of our corporate account holders as rational actors, bound by the AUP and fear of consequences for access violations - An unthinking, unfeeling worm that is happily supplied and even mandated by corporate leadership is at any time willing to attempt to bypass any control in its way.
Welcome to the next level of zero trust - where behavioral detections mean nothing and all actors must be assumed to be unsleeping and malicious, if not simply adversarial.