A simulation study says sycophancy breaks even perfectly rational users and that neither RAG nor user awareness closes the hole. Here's what it actually found.