Let's not kid ourselves, llm's are already doing the incident response for this in many infrastructure teams
What is the source of truth? If the LLM auto discovers when it needs to mitigate then it can get prompt injected. It's basically a backdoor into the system.