David Sacks：用户授权的 Agent 不等于网络攻击，银行应支持授权接入
白宫 AI 负责人 David Sacks 回应 Axios 那篇银行封杀 Agent 的报道，指出 Amex 在 Muse 里已支持授权管理，区别了授权与攻击。
David Sacks 在 X 上回应 Axios 关于 AI Agent 登录银行账户的报道，认为多数行为属于用户授权型 Agent（如 Muse、Instinct、Grokbot），并非网络攻击。他举例称 Amex 已是 Muse 中的授权连接，用户可以授予、限制和撤销访问权限。他认为银行应支持用户主导的 Agent，只读权限是合理的过渡方案，而带完整写权限的访问属于另一类风险。他批评把用户授权行为与网络攻击混为一谈的做法是在误导公众。
There’s a world of difference between user-authorized agents (Muse, Instinct, Grokbot, etc.) and true unauthorized/rogue agents that could constitute cyberattacks.
Most of the activity described in the Axios story appears to be the former: customers sharing credentials with agents so they can take actions on their behalf. This may violate bank terms requiring humans to log in themselves, but these are in no way cyberattacks.
The direction banks should go is to support user-directed agents. For example, Amex is an authorized connection in Muse, making it easy for users to grant, limit, and revoke access.
Read-only permission levels are a sensible interim step. Several banks already support or are moving toward them. Full write access (with user credentials) is a different risk category and should be approached carefully.
Frightening the public by blurring the line between user-authorized agentic behavior and cyberattacks is irresponsible.
