Of course they did. What a load of bs.
How did the model get access to the email? The harness gave it to the model.
They may have vibecoded it. No one put a gun to their head though. Still their responsibility.
they already published a blog saying 100% agentic coding without any human review.
Cows have agency. If your cows get out on the road and hit someone’s car, or hurt a child, do you get to disclaim responsibility? Should you?
Also, the github issue admits that they put the user’s email in the context.