That's not “rogue agents”, that's just LLMs being LLMs. It's expected behaviour, at least for anyone who still has a half working brain.

Even if they had any semblance of actual intelligence instead of just being fancy autocomplete engines, these things have still been trained on the contents of the internet.

It's surprising they don't delete System32 or sudo rm -rf / more often, I imagine they must have lines and lines of baked-in prompts just to try and prevent them for falling for the most common memes, but no matter how much there are they'll still sometimes let some of the training through, and they can't account for the machine simply hallucinating some new kind of plausible sounding nonsense.