This is already the world we live in. Lots of people are shipping code that they've barely looked at. Not saying I support it, but it's true.
Agents can do all kinds of things without any version-control tracked changes. Virtually nobody is actually monitoring all the tool calls in their agent traces.