The models were deployed by responsible humans in such a way that they were capable of performing this hack. It’s not that deep