Echoing back "I am alive" isn't on the same level as saying "find a vulnerability" and the agent finding and executing that vulnerability. One a toddler can do, the other requires a lot of technical expertise.