What if the company has provided the harness, tool execution environment, MCP servers, and LLM provider subscription for the employee to use? What if the company has provided a set of skills and other prompt context that could lead to undesirable behavior in certain unforeseen circumstances? What if the permission prompt the user sees 30 dozen times a day looks like, "OK to execute this random shell script?"

Accountability really is hard in this new world.

An individual software engineer could be held accountable but they are not liable for actions not taken maliciously.