It's also under the control of anything that it finds in its current "context window" that it decides to act upon, not just Microsoft...

https://greshake.github.io

https://kai-greshake.de/posts/in-escalating-order-of-stupidi...