This is why well architected systems will require the AI agent to do things through other services via well-defined APIs. First, it allows the business to limit the space with which the AI can interact with the rest of the business. Secondly, it allows the business to use good ol' fashioned AI, logical rules, etc that can prevent an AI agent from doing things that it shouldn't. Of course, there will be exceptions to the rules, the same as there are today, but it should drastically cut down the number of humans involved in the process, and when a human is required to intervene on the business' behalf the AI can summarize the entire conversation + the reasoning on the business side for not acquiescing to the customer's demands.