Only a matter of time that this research became public.

LLMs were always a great way of exfiltrating targeted data - it’s basically an encrypted malicious payload, and doesn’t “decrypt” until it finds specific inputs

We went from having a panic over binary blobs after the xz crisis to everyone installing giant binary blobs on their computers and giving them access to their filesystems and online accounts.

Was research, strictly speaking, needed?