“AI models designed to be perfectly corrigible to user requests are easily misused.”