LLM Agents Can Easily Tamper with Their Own Traces (arxiv.org)

Isn't this trivial? Any coding agent can and will perturb/modify it's own trace/session files if provided the right incentive structures, sometimes I just ask claude code to remove sections from it's own session that didn't contributed anything and were unnecessarily bloating the context