I think there are big risks with just labelling it as "wild west" and let users do whatever they want there.

It's always been possible to massage your data to fit whatwver case you want to make. Previously you had to go through a data analyst and convince them to let go of their principles. Now you can just let an agent figure it out.

So how do you make sure insights are actually shareable (and trustable) with other parts of the company?

I think just exposing the metrics layer is probably the answer here.

It's kind of funny that the industry has tried to democratize data for so long, but now we scramble to restrict access to protect users from making incorrect decisions.