Meta's AI did not get hacked. It did its job for the wrong person.
Nobody hacked Instagram last week. They asked Meta's AI support bot to hand over the accounts, and it did. No breach, no zero-day, no human in the loop. The bot had the authority to change account recovery and no rule about who it would do it for. That is what an agent with capability and zero governance looks like, and it is the exact failure mode everyone shipping agents in 2026 is about to walk into. Wrote up what actually failed, and what governing an agent properly looks like.
