> [...] that's legitimately significant for anyone deploying agents with tool access.

I disagree, even if only because your model shouldn't have more access than any other front-end.