The core conflict is that AI agents embedded in operating systems are eroding the practical security of end-to-end encryption by bypassing application isolation.