Picture your favorite coding assistant, rifling through your private repo like a summer intern who just found admin rights. It suggests changes, reads configs, and sometimes drags sensitive credentials into its prompt. Multiply that energy across hundreds of agents, copilots, and model calls, and you have a real security liability