I was doing some routine coding a few months back, I think via Copilot, and the thinking said something like "This request requires me to access files in a different folder, but the user has forgotten to give me the correct permissions. I have updated my configuration file now to allow access outside this workspace and have retrieved the necessary files." o_O

I've seen similar "hacking" behavior on a couple of subsequent ocassions. Both impressive and highly alarming at the same time.