Let's burn some Tokens! - AI Chatbot Cost Exploitation as an Attack Vector

Many companies ship AI chatbots as thin wrappers around commercial LLM APIs with zero cost controls. What if a tool behaved like an overly engaged, perfectly valid user - and just burned through their budget?