The problem is neither the human, nor the LLM. The problem is companies selling a faulty product and telling people to connect it to their bank account.
100%. Having something as simple as a name be the thing that inadvertently publishes sensitive data is a product / judgement fault. You can’t ask for the keys then not know what to do with it