Ultimately I think, most trains of “thought” that could be a milestone towards a misaligned AI taking a dangerous action could be input by humans, especially if programmers have little oversight on what they put into their AI systems. An analogy that occurs to me is a plane, a powerful body of technology that can ultimately be controlled by a single person if they try. We have seen many cases where bad actors have taken advantage of plane technology and set it on a destructive path, either for political goals or suicidal intentions. I suppose in theory a misaligned AI might find it easier to hide its tracks but then again a bad actor could instruct the AI to hide its tracks