The swiss cheese model of accident causes applies. No one cause would have triggered the accident on its own, it takes an unfortunate alignment of multiple issues. You still have to treat each as a cause.

In this case, a fault by the AI agent, bad permission management and faulty backups all seem to be contributing causes. None of them should have happened