https://arxiv.org/abs/2401.05566

Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training

That is completely different from the models spying on the users, which is what is discussed here.