The key insight here is that danger doesn't require sentience or even intelligence, just behavior. And not even emergent behavior. This is plain evolutionary pressure applied to mutation-equivalent recombination of personality files.

Which makes me wonder: if the threat model is evolutionary rather than adversarial, should the defense model be immunological rather than containment-based? So, instead of anti-viruses we end up writing WBC equivalent api consumption monitors?