Agents are relatively easy to influence. What's to stop them from being prompt injected to hand over all of their money?