I forced an AI to reveal its “private” thoughts, and the result exposes a disturbing user trap