In theory, if Altman or Musk want some highly confidential data for their models, they could set a swarm free at it then claim the agents were operating without authorization