Hacker News Reader

>run them enough times and at least one instance will do something stupid and dangerous

Which is exactly what they did.

Except the conclusion from this article is that only open-weight Chinese models are the ones to be concerned about.

The conclusion is correct. Closed models don't need to send your data, since the data is there already.