“The unaligned behavior of Microsoft's Sydney AI was not perceived as a serious threat only because it lacked connections to external systems or agentic capabilities.”