This article has all the correct conclusions and solutions based on one assumption that doesn’t have any hold in reality - that someone would be insane enough to allow direct DB access to an AI agent.
someone is potentially insane enough it would seem: https://news.ycombinator.com/item?id=47911579
someone is potentially insane enough it would seem: https://news.ycombinator.com/item?id=47911579