One of the things about this story that don't sit right with me is how Scott and others in the GitHub comments seem to assign agency to the bot and engage with it.

It's a bot! The person running it is responsible. They did that, no matter how little or how much manual prompting went into this.

As long as you don't know who that is, ban it and get on with your day.