Your conclusion is pretty silly.

My expertise has led me to the obvious fact that I would never give an LLM write access to my production database in the first place. So in your own example my expertise actually does solve that problem without the need for something like a consequence whatever that means to you.

We already have full control over the input and tools they are given and full control over how the output is used.