With the rise of autonomous AI agents, the real security risk is not centralized at the login screen. It starts after access has been granted.