However the LLM that sent the token has to have been prompted by a human to do so at some point, so the point still stands. These things don't just operate on their own.

And that is besides the point that when these things do stuff like that, they have a tendency to exponentially introduce problems into the task, as they do not question each other, and even if they did, they have no way of determining what is or is not accurate, so they would begin to loop.