I work in infosec and we are treating GPT&friends as a catalyst for more sophisticated automated social engineering attacks. We are expecting to see automated spear phishing campaigns and especially attacks against our chat and email based customer support channels (automate asking for refunds, discounts or freebies, fire it at the support channels until a support worker slips up). Or just plain DoS by inundating them with real sounding but fake communication.
I'm just thinking how powerful a XSS that launches a GPT chat injected into a major companies website would be. Think any service that allows bill pay, and or does customer service online.