One link can create an agent with your connectors attached. Who hands out that authority, who watches it, and who decides where it runs.
Heavy AI users are shipping work they don't fully understand. The fix isn't banning AI, it's governing it: an accountable owner, sanctioned tools, and training.