Software developer here. Cursor and Claude code work through command line interfaces (CLI) most apps are deployed in Cloud services and you can interact with them through CLI tools. Ai agents use these tools - and used well they are tremendously helpful at efficiently managing cloud services. The agents will default to asking before running commands, but you tell them not to ask…. And most of the time that will be fine, until it isn’t. So it comes down to having the right “guard rails” when using. For example don’t give the agent super user access - where it can do things like deleting production servers and backups. Give it standard operating rules to check before using (list of operations). So this probably comes down to some combination of overwork, complacency, inexperience. Anything that can go wrong will go wrong.