At least in one of these cases the models were being tested without the normal safeguards you would see as a regular user.

I spotted Claude doing it when accessing PubMed.