Any basic LLM told to evaluate the traffic against the actual goal would have been able to flag this.

How sophisticated to we need to be to know we can do write actions with a GET? Does nobody in AI know anything about HTTP?