In my experience they're pretty well aware of this failure mode, to the point where I learned the word accretive from adversarial agent code reviews this week. Less good at fixing it, but once you know it'll happen you can ask it not to.