Yeah, I think that’s where the real crime is: the fact that OpenAI was asleep at the wheel when it came to security and monitoring. This should not have happened at all, but they didn’t even realize it even happened in the first place until many days after the fact. (I’ve also heard that most, if not all, of these incidents involve the company in question outsourcing their sandboxing (??) to some “frontier AI security” startup called Irregular. link)