A customer asks their AI assistant to pay a utility bill from their bank account. The assistant logs in, navigates to bill pay, fills in the form, and gets blocked. Ten minutes later, a credential-stuffing script tuned to look human walks straight through the same defenses.