I've started noticing this as well. I really like the 1Password ssh agent setup, but the agentic tooling background triggers is unnerving, and I don't want to setup a "default allow" as it would defeat the purpose.