According to @_avichawla, Google’s Agents CLI adds scoped identity, model armor, and an agent gateway to mitigate prompt injection and egress risks.