Real capability requires broad data access. Real security requires tight constraints. Trust plummets for high-stakes tasks like financial transactions. You can keep agents safe in limited domains, or give them access needed for actual impact. Pick your risk.