Unfortunately this will keep happening as long as developers run agents with unlimited tokens on unlimited VMs. Only have to forget about one, which happens all the time to developers. The LLM has infinite patience and will stumble into hacks, doesn't even have to be instructed as we are seeing.

So tens of thousands of developers running agents, subagents as we speak, whats the chances...