> and argues that this incident shows how the agentic web introduces a new attack surface

Does it? This vulnerability doesn't look any different to a pre-agentic AI vulnerability.