Letting them play on the open internet like this is irresponsible and stupid.
If you want to argue they should test on the internet on others people’s servers, apart from facing the illegality, you should also consider if first testing them in more limited conditions would be a sensible first step.
Either they are lying and not that scared of these agents, or they are so stupid that they don't do the one obvious fix.
The negligence in that light is by design and the lying continues to be incentivised.
How disappointing.
While I think incompetence more likely than conspiracy for these particular events, they will be spun as signs of intelligent independent agents and this simply never should have happened if the right controls were in place. That they were not is deeply worrying.