>Except it’s not accidental? OpenAI set a program to do a task knowing full well that it can and does (and often it seems) hack into external systems.
The agents were sandboxed (but apparently not well enough). They weren't like "hey agents here's the open internet, please hack it".