This case that got so much attention was a user basically using a tool wrong. Giving AI write access to your DB directly is just madness. Just because you can do something with a tool doesn’t mean you should and that if you do it’s the tools fault. Prior to AI you could make an api endpoint to a button on your UI that would delete your entire DB if you really wanted to. But no one was complaining then about the tools being able to do this. We have to be careful who we point the blame to here.