Well yes, that’d what overfitting is. Thing is, the large model will reliably be poisoned, but all other performance metrics will take a nosedive.

Anyway, who gives access to something like send_email all willy nilly? Guess a substantial number, but if you’re serious about protecting your private data assets, you would’nt just let autopilot run the show unchecked with full network access.