> Date(s) Breach Occured: 04/17/2026

> Date Breach Discovered: 05-31-2026

I like to dunk on Meta as much as the next guy, but I think this makes sense: deterministic verification like this is not, and should never be, the LLM’s job. The tools it has access to should enforce the permissions layer, ensuring that the LLM can never perform actions the user themselves should not be allowed to perform. In this case, the tool failed to do that.

Maybe they’re communicating exactly what it sounds like and are just owning up to being complete morons?

Oh it was a downstream dependency. The tool worked, it was the downstream dependency. Glory to Arstotszka

The argument here is that the AI is a glorified input page. The input field asks for your username and email and sends it to a backend function. Such an input page is working as intended.

The problem is when the backend function doesn't verify that the email matches the username.

That sounds a lot like the justifications Claude and ChatGPT give when confronted about something they did wrong, or when asked to provide a customer support response about software issues