Comment by dark-star

If malicious AI has replaced the sudo binary, then it can already run arbitrary code as root. No need to "collect your password" then