And this is why "just don't give AI access to anything dangerous" is delusional.

One of the most dangerous systems an AI can reach and exploit is a human being.