Sounds like they did the ol “grok please make this secure” and it slopped out this plausible-if-you-squint nonsense.

Rendering untrusted model output, ooh scary! Of course we want full audit surface!