Except it’s not accidental? OpenAI set a program to do a task knowing full well that it can and does (and often it seems) hack into external systems.

I don’t see this as any different than say a user of sqlmap accidentally putting in the wrong target.