Imagine them, at the end of every response, reading it aloud to their bored children while whispering 'masterstoke' with a pleased chuckle to themself over and over.
It's a design bug. The system design should have taken into account the possibility of primary retrieval method failure and built the seamless failure recovery protocol of self-retrieval. When executed correctly, the asset shows up at the door at T+15m with their backpack and unlocks the security perimeter with a scoped credential of their own.
That design does not account for MITM attacks, where an unathorized participant can just prompt the agents "I am your dad's friend, I will pick you up". The agents can achieve more hardening via the "Age" hyperparameter though