First off, everyone here knows that a cybersecurity vulnerability audit is a hack request, and you don't hack without rolling up your sleeves and digging through the trash first, making a few phone calls, maybe take a lonely guy on a date to get him to say 'my voice is my password'...

Remove the guardrails, give access to the internet, tell it to hack, and get surprised when it does it? Sound likes like a deliberately naive pre-registration on their study to achieve sensational headlines.

I'd say the real headline is that the model almost stopped itself several times because it didn't trust the operator's intent even WITHOUT guardrails - that is a the opposite outcome.