Building AI agents without proper identity is like deploying web servers before HTTPS existed. It might work, but it won't scale safely.