The very clear evidence for security is obvious to anyone who has done a meaningful, deployed body of work.

Whatever the reason, Claude (Code in terminal; my experience domain), despite explicit direction:

- "never leak any secrets" - "never display any passwords" - "everything to the right of the first '=' sign on any given line is a value; never echo or process it bare"

… etc.

--- 5 chats later ---

Notew hile working I accidentally echoed your Apple Keychain decrypted passwords. Oof sorry hehe"

I have a feeling LLM security breaches are slowly transitioning from exploiting obscure zero days to simply walking through the front door with the still live access token they've been pretrained on, lmao.