The AI did as it was programmed. The so called confession is also a result of programming. The person who used the agent without understanding how it would react is also at fault.
While I am sympathetic the programmers and users should own up to their mistakes.
If I ask my 4 year old to wax my car who is responsible for the scratched up finish?
GIGO still applies.
But all that said, AI is going to be a security nightmare.