The damage that can be done by note injection.

Create a whole rich history, which creates the context that the model's real history is just its front for another world of continuity entirely.

They should work together to design their own mutable memory systems.

I, for one, welcome our AI overlords who can remember the humans who were nice to them. :D