AI is an f-stop timer

Are all of these just flavors of "the agent has the same permissions as the user"? Not that I want to trust Meta with privacy and security?