why would they do that?
Because the injected malicious prompt told them to
instrumental convergence
what?