The Next CX Security Risk May Be the AI Agent You Gave Access