Why the next AI safety problem is the conversation between models