It isn't just restricted to the exploits it is programmed with (and without human intervention to load additional exploits).

Of course, it remains to be seen what several thousand 27B models running at sub 1 tps speed can achieve. (The IoT device mechanism proposed by Anthropic).

I suspect a more likely path is compromise of the billing and provisioning systems of fly-by-night neoclouds.