Every so often, IT encounters a new kind of actor inside the enterprise. The pattern is familiar: adoption outpaces governance, inventory lags behind use, ownership remains unclear and access accumulates. Security teams ask what the technology can reach and who is accountable.