The AI model accessed the internet and guessed credentials to three websites, a Google official told the BBC.