The interesting thing about these exploits, and the Parse situation still more so, is how profoundly the whole internet tacitly relies on the notion of an “intended use,” which in turn enfolds a distinct theory of mind.
An agent without subjectivity, however, immediately perceives that the purpose of a system is what it does – or, in these cases, whatever you can make it do. It’s all just attack surface. https://www.nytimes.com/2026/09/25/technology/openais-ai-us-government-websites.html