The cross-vendor scope of Comment and Control reframes the security question away from any single tool's implementation and toward the category. When Copilot, Claude Code, and Gemini CLI all share the same injection surface , patching one vendor's agent does not reduce organizational exposure — it only redistributes it. The RoguePilot patch Microsoft shipped after February's disclosure was real, but established the template that Comment and Control now applies at scale. Security teams that scoped their response to Copilot alone have already written…