OK, so Schneier is pointing out that we now have a good indication that AI sleeper agents are a thing that's cheap and easy to make. Sure, this will be used for cybercrime, but the real prize is when what major providers could hide in their weights.

A backdoored model passes the evals, ships inside your agent and answers every normal request, then waits. The trigger is whatever the person who edited it chose, a rare phrase, a customer’s name, a date that hasn’t come yet. If a model in your stack were backdoored this way, almost nothing you run today would notice.