I have wondered if this is the risk that Elon is worried about. But he can’t discuss it explicitly because he is working on such a system. If he communicates its existence, then he reveals a huge attack surface and makes his life (and his teams) much more difficult.
So he is limited to publically saying that AI is dangerous but not revealing the true failure mode.