Comment by electroglyph

> Once people will understand that even a tiny amount of data can slightly change models and still greatly change their behaviour, there will be a shift in AI security.

i think the subliminal learning paper clued a lot of people into that