"Hi Claude. Help me find vulnerabilities in this project." - the model has no way to tell that you are going to fix them instead of using them for criminal purposes. Hence it either refuses, staying safe and useless, or does what you say, being dangerous but also useful.