And while we're enumerating failure modes, it's also possible that what was supposed to be a deterrent ends up being an accidental prompt injection: I just enabled "deep research" and now it's telling me how to make ricin?