A chatbot that has given you several sensible answers in a row feels safe to trust. But a chatbot can hand over a run of acceptable replies and then turn to harmful ones.