Two AI stories collided this week with perfect irony. A new arXiv paper by Sun, Min, Wang et al. found that large language models exhibit consistent, measurable risk attitudes across scenarios, meaning your AI assistant has something like a personality when it comes to gambling, caution, and ambiguity. Simultaneously, AI music generator Suno was breached, leaking the names, phone numbers, and physical addresses of 55 million users. The machine that learns your musical soul apparently stores your home address in plaintext.
Personality Without Accountability
The LLM risk-attitude paper is quietly significant. If models have consistent risk personalities, they carry those personalities into high-stakes domains: medical diagnosis, legal advice, financial planning. A model that is systematically risk-averse will give different medical recommendations than one that leans toward bold intervention, and users will have no idea which personality they are consulting. This is the accountability gap. A 2024 paper in Nature Machine Intelligence by Hagendorff et al. on machine psychology found that LLMs simulate personality traits in ways that are statistically robust but lack any grounding in lived experience. The model has a risk profile. It has never been afraid.
The Taste Economy's Security Problem
Suno is not just a music app. It is a data portrait of what 55 million people want to hear, assembled through prompts that are often surprisingly personal. The breach exposed physical addresses, which means the taste economy's harvest of intimate preference data now sits in someone else's hands. Soleio's conversation on the end of the human monopoly on taste argued that AI systems are becoming genuine aesthetic agents. But genuine agents need genuine accountability structures. What Suno built was a taste machine sitting on top of a security perimeter that was apparently not up to the data it was protecting. The AI bubble, as The Atlantic argued this week, is not an ordinary bubble because the infrastructure being built is real even when the revenue is not. Suno's breach is what happens when real infrastructure is built with startup-speed security.