The speaker says organizations now give AI agents an identity—sometimes the user's own or a more privileged one—and allow them to download packages and act with broad discretion.

“It had to be vetted and scanned and all these sort of things. And now we unleash an agent, we give it an identity, which is essentially our own or worse, and then we unleash it, and we say, "Do whatever you wanna do, and by the way, download whatever package you wanna download."”