"...the AI can just write a Python script to rewrite memory in the address space of its own running inference engine" would require a tool call to a python interpreter... this method, hacking the inferencing sw does not requires a tool call.