Think Dangerous AI Can Be Easily Turned Off? Think Again