Yeah, agreed. Read-only and capability-scoped access feels like a no-brainer.

Most platforms were built assuming a human behind the UI. Once you introduce AI agents, the missing permission layers start to show.