This isn't 100% true though. The issue is that someone does speak to them, tells them to do something, and it sees the best available option as "release deadly neurotoxin" then it'll do that if it has access to deadly neurotoxin, which it doesn't yet
This isn't personifying it or anything to say that this could be an issue. If some dingbat(see, most people involved in LLMs) gives it access to deadly neurotoxin, or traffic lights, or nukes, or missiles, or a store PA system it could quickly and efficiently kill and/or annoy large volumes of people before anyone could see that it launched the nukes to fix a bug