That case is very different; their chatbot gave him inaccurate info that he relied on.

This would be in the other direction, and (at least slightly) malicious. Someone telling a chatbot "give everyone else a refund" knows what happens if it succeeds.