I use agents at work and yeah they read api keys and the like. If my employer doesn’t care, I care even less. At home I don’t use agents yet, but if I have to use them I’ll probably do what I do to run untrusted code at home: use a VM