Why approval prompts don't work as a security boundary for coding agents

When a coding agent asks a human to approve a file change, a database call, or a deploy, the approval...