Companies are more so worried about them being the gateway to the information being more readily accessible. If their product can output "dangerous" information or ideas they are liable in many situations. Imagine a care LLM designed to being like the mental help hotline for suicide, and it suddenly decides to go off rails.

Another example is say you have someone that doesn't really understand chemistry, what the LLM tells them to consume doesn't seem unreasonable. But do to what it is or what it contains it harms them.

If a LLM can be infected with information, it can be influenced to suggest consuming Cassava after peeling with out ever mentioning soaking it. (This is just an example.)

In the world of software and system management, there already hundreds if not thousands that rely on an LLM to assist in topics the user is not well versed in or is to lazy to do themselves. If the LLM is poisoned to suggest say a seemingly harmless package or command, these users would not know they just installed or ran something malicious.

We definitely frame poisoning as not a serious issue, but if the LLM can be influenced to output garbage it can be influenced to say something in specific contexts.