This isn't even AI security, as far as I can tell: It looks like regular old computer security to me.

In the old days we just call that arbitrary code execution.

And these AI people just act as if that's never a problem.