It's a probabilistic model which exhibits tendency towards hacking into systems.

If you write down a decision tree explicitly you can just exclude all nasty stuff. But a decision tree modeling all LLM can do would be bigger than can fit into the universe. The whole point is that we cannot explicitly control behavior due to combinatorial complexity of all possible interactions, etc. LLM is a sparse representation of a distribution on (2^8)^1000000 points.

Reasoning is the term used in scientific literature. It actually does write its sub-goals in English, how would you call that?