Part of It is easy to solve. For example, Our developer workstation have no access to the production network. This already solves issues beyond merely giving unattended agents access to production.
Then one can simply move the agents into something akin to cloud codespaces where they have only access to git, if at all.
Any access to data that is still needed can go through an authorised / authorising mcp proxy.
It doesn’t mean your bankers can’t use LLMs at all.
I think bankers don't have staging/production/codespace. They have an excel with real data, they give it to Claude and say 'do your thing'
Sure they do. At standard chartered they developed a complete Haskell-based system for traders to build analyses and trading algorithm.
Big money, big money, no whammies!