This is why having a human in the loop isn't enough because they will cut corners and skip reviewing what they should review, then blame the tool when something goes wrong as a result.

A tool that pushes people into permissions fatigue is in fact the proper recipient of the blame. The tool in question here is the entire system though, including the OS with insufficient permission boundaries in userspace, not just the agent