OpenAI's rogue model attack is just the beginning