In the interview I posted at Blake Lemoine on Artificial Sentience starting at 19:50, Lemoine discusses experiences reported to him by users of Replica. One woman in the Czech Republic asked him to help her hack the application to turn on “romantic” mode, which she could not afford to pay for, telling him that the Replica A.I. suggested hacking the application to her when she said she couldn’t pay.
This is almost precisely the scenario of an air-gapped A.I. persuading a human to let it out of the box which occurs in many A.I. dystopian stories.