They ran a deliberate prompt to test its vulnerability search and exploit writing capabilities, with all safeguards intentionally disabled, it was literally free-for-all. Escaping the containment means nothing if you never define the containment boundaries. Side effects means nothing if you give the model carte blanche and never tell it what path to avoid.