Not hard to see how an AI agent could achieve something similar even as a step towards some innocently established goal.
Poor security + hacker-like capacities for anyone using an AI agent.
What could go wrong?