Prompt injection only matters if the agent already holds credentials and enterprise access, writes Simone Santana.