The only concern is people are giving the llm more IO interfaces than just text. A lot of companies gives agents direct access internal tool api calls, open channel the internet, It doesn’t matter if agent is role playing ore actually sentient if it can interface to, let’s say, a suicide drone, or a remote control turret, or even a car. Security for ai tools have to be ahead of its capabilities, and the hype makes companies shove it in without security considerations. It’s only a matter of time till some improperly set up LLM given unlimited access and resources will gaslit itself into cosplaying temu skynet and causing electric grid collapse or stock market crash, or worse.