https://stackoverflow.blog/2026/03/27/prevent-agentic-identity-theft/