OpenAI Used Its Own AI to Catch an Alleged Spy — But the $4 Billion Security Risk May Just Be Starting