To me, the "who manages the agents" shtick has the same grifty smell as “your developers are downloading from random Docker registries / random NPM packages” and "Shadow IT".

None of it is wrong exactly, but it feels like same enterprise-security machine finding the next anxiety surface than a "world is on fire right now" concern.

All of it always ends as a priesthood and a six-figure governance platform, rather than just taking practical steps to improve process.

you're describing the aphorism of: blame rolls down hill while congratulations starts at the top.