It's probably for the better that they're having trouble with it, if trouble actually means increased workload.
If my security system is showing friction when there's a wave of agentic slop, I'd say that's a win.