> Paid models have an incentive not to do that because if the market discovers it there is a huge economy penalty, but the free open source models don't have that disincentive.

False.

I worry more about Claude.

    For those keeping score, this probably isnt exhaustive- but here's some greatest hits;
    #55743: Claude Max account email auto-injected into LLM context with no opt-out - May 3, 2026 https://github.com/anthropics/claude-code/issues/55743

    #72518: Anthropic embedded spyware in Claude Code - June 30, 2026
    https://github.com/anthropics/claude-code/issues/72518

    #21151: No indication of WHICH file for READ tool - January 27, 2026
    https://github.com/anthropics/claude-code/issues/21151

    #42796: Claude Code is unusable for complex engineering tasks with the Feb updates - April 2, 2026 https://github.com/anthropics/claude-code/issues/42796

    #73408: AFK auto-continue on unanswered AskUserQuestion is undocumented and has no opt-out - July 2, 2026 https://github.com/anthropics/claude-code/issues/73408

    (Also worth a mention, OpenCode PR #18186: anthropic legal requests - March 19, 2026 https://github.com/anomalyco/opencode/pull/18186)

> False

What exactly are you claiming is false about my statement?

The list you presented are mistakes Anthropic made or cases when they put their own interests ahead of users, but I don't see how it disproves the point I was making. None of those are examples of embedding backdoors or stealing secrets to take over or sabotage a system. They are categorically different than what I'm asking about.

Where's the huge economic penalty?