Probably made it easier to grant someone/something access in a hurry, during development of something, and vows were made to fix it later.

This is what happens when you have a team that does not give one mote of a shit about their craft, or their customers. Mostly the former.

You have to go out of your way to set up publicly exposed storage like this!

Admin: "AI Agent, set up a storage bucket that is accessible by everyone on this list."

AI Agent: "All done boss! Every one of those users can access this newly created bucket!"

Even the most basic of AI tool, assuming they used them for their terraforming, would know better.

You would think so, but no. Not in my experience, at least. Especially if you're focused on a narrow goal or fixing a very specific problem, AI agents tend to fixate on the happy path to the neglect of everything else. They may start out seeing the big picture, but it takes almost no time at all for stuff like security to drop from their attention unless you're actively reminding them.

This is exactly the kind of issue I've seen AI cause at the enterprise I work for.