Comment by dpark

This exploit has essentially nothing to do with AI and everything to do with a terribly designed account recovery flow.

This exact same flow could have been (and may have been; I don’t know how much the chatbot here actually does) statically coded.