The wildest LLM backdoor I've seen yet

or we don't yet fully understand how the patterns work inside LLM's probably?