"We gave DROP grants in prod to the user running AI agents irresponsibly at our company, and the expected happened." FTFY.

In seriousness, RBAC, sandboxing, any thing but just giving it access to all tools with the highest privileges...