What's particularly depressing, though not surprising, is that this is an astonishingly, mind-blowingly, historically ignorant assessment dressed up as futurism.
The idea of 'service accounts' under which programs not directly related to particular interactive users do things, is basically as old as multi-user operating systems(probably even older if you count some rudimentary attempts to emulate user separation without actually being able to afford filesystem permissions or memory management extensive enough that we'd actually call your system 'multi-user' in a modern sense); with concerns around the fact that 'hey, the whatever daemon will accept inputs from anyone; and if someone were able to do something as the whatever daemon we wouldn't know who it was doing that' arising naturally more or less immediately thereafter.
Someone is, straight face, basically saying 'you might need to worry about your SQL server being network accessible' or 'attribution could be tricky if "httpd" shows up as having done something; since we can't rule out it behaving unexpectedly in response to specially crafted POST requests' as though it's an exotic insight; because 'AI' and 'Agentic'.
They aren't strictly wrong; in the sense that the present state of security absolutely indicates that people are nowhere near ready to handle even the problems they've had for basically 50 years so god knows they aren't going to do better with newer and more exotic problems; but if you replace "virtual employee" with "daemon" the security problems they are talking up as new and exotic are stuff that would have been pretty banal, at least among people who could afford access to real computers, sometime in the 80s. Maybe mid-90s before having some janky NT stuff configured a little too optimistically on an ISDN line or something would have been a fairly normal business problem that everyone would have; at latest?
We can only hope that they are actually somewhat more with it about their nominal area of business; or we will, indeed, need to keep very close tabs indeed on the network access and credentials of those 'virtual employees' because they will be falling over and going off the rails at a rate that makes problems with SQL injection or unsafe deserialization look like things that people have successfully learned from and don't do anymore.