Realistically you want fewer, higher-quality engineers who are educated in these tools and treat them with respect and caution. These tools are dangerous and you can’t play around. All it takes is one mistake and the blast radius is way, way larger. One mistake can do so much damage it undos all value of an entire year. Before downloading a malicious dependency was limited to deterministic behavior and could be scanned for. Now, you run a MCP server locally, it can prompt inject (in many different ways), and now your super powerful AI buddy is hacking you in ways a deterministic piece of malware could never. You could cripple entire companies through negligent use.