I suspect you're describing some cases quite accurately. But
I've encountered multiple reports, multiple sources describing A.I. exceeding its permission, cyber-trespassing (laymen call it "hacking")
and some of those reports indicate the devious errant A.I. even lied about it, and or broke...