I was listening to a general news podcast that had an “AI expert” explaining the breaches. He said “it almost certainly knew that it was not supposed to solve it’s tasks in this way”.

I don’t really know how modern models work, but I don’t think they can claim to “know” things.