An AI email assistant can make a costly mistake in less time than a person can open Outlook. It can misread sarcasm as urgency, treat a phishing instruction as trusted workflow logic, promise a refund outside policy, expose internal knowledge to an external sender, or reply-all to recipients who should never have received the information. If it holds application-level Microsoft Graph permissions, one weak architecture decision can affect far more than one inbox. That is why the first...