If some person or company is so criminally stupid that they will grant an AI agent such unrestricted access to their systems, the management damn well better have ensured complete, secure offsite storage of all server material and functions. Otherwise it's criminal negligence.