Agent hacking is just a the beginning, it’s a bit early to think it’s a solved problem