1,800 exposed instances leak API keys and credentials. Agents operate inside authorized permissions where firewalls can't see. Traditional security models weren't built for this. Your developers are already experimenting.