Most successful intrusions still begin with exposed services, weak authentication, stolen credentials, vulnerable software, or trusted third parties, rather than complex AI pipelines.