A conference talk in Rome points to a hard security truth: once software can plan and act on its own, the fight shifts from raw automation to identity, authorization, and containment.