As for humans passing their token to a bot, that’s not really solvable by any system.
Indeed. Which is (part of) why I wrote, "pick two".
But the human is still the one with the authority, and chooses to delegate to the bot.
Which is what we already have today.