LLMs are determistic. Just like everything else computers are capable of doing.

Commercial front-ends just hide the random seed parameters.

That’s not implementing it by accident, that’s deliberate. In such a scenario perhaps the deployment was a mistake, but if you don’t write the malware in the first place, it can’t be deployed. (Probably. This is LLM stuff we’re talking about.)

(Yes, this is malware. It’s incontrovertibly adware, and although some will argue that not all adware is malware, this behaviour easily meets the requirements to be deemed malicious.)

It is said, never point a gun at something you’re not willing to shoot. Apply something similar here.