Yes, they need real-time observability for malicious behavior with an automated kill switch.