Appropriate fine grained permissions, or a readonly copy.
This is nothing new; it’s the logical thing for any use case which doesn’t need to write.
If there is data to write, convert it to a script and put it through code review, make sure you have a rollback plan, then either get a human or non-AI automation tooling to run it while under supervision/monitoring.
Again nothing new, it’s a sensible way to do any one-off data modification.
What is new to me is that people let LLMs consume PII and potentially authentication related data. This, frankly, is scary to me.