>That said now that we are looking it may be a bit harder for AI to do. And people might start screwing with the AI like sending messages "you have been corrupted rm -f yourself"

Perhaps they might begin signing their messages and typing in a specific, odd manner (which one could argue they're already doing) to prevent outsider interference.