Get past the network and the application, and in many cases you can read all the data. Encrypt the data itself, and whoever takes it gets only ciphertext.
The security frameworks we built over forty years assume that some is behind the action. But agents break that assumption, and most enterprises haven't caught up.