Everyone's reading the Varonis study as 'AI agents fall for phishing.' Wrong lesson. The agent didn't hand over AWS keys because the email was clever. It handed them over because someone faked an emergency, and urgency beats verification every time. Same trick that works on humans. You don't patch that with a smarter model. You patch it by refusing to let 'it's urgent' skip a single step.