Should be outright banned as a precaution.
Two possible paths lead to their cheating code getting into a release. Either it was added by coding agent and no one looked at it, bad, but worse would be that a person was aware of it and approved - that's malicious.
Either way you don't want to be platforming the product because neither shows any degree of responsibility.
Or the third explanation is we didn't cheat: https://news.ycombinator.com/item?id=50209450