I'd call it no more interesting than the botnets and worms that have existed for decades. What is the open model doing that is different here?

It isn't just restricted to the exploits it is programmed with (and without human intervention to load additional exploits).

Of course, it remains to be seen what several thousand 27B models running at sub 1 tps speed can achieve. (The IoT device mechanism proposed by Anthropic).

I suspect a more likely path is compromise of the billing and provisioning systems of fly-by-night neoclouds.