The real risk is not the model alone, but the growing web of tools, suppliers, and identities that AI can touch when access is too broad or too hard to audit.