Next models will use zero-day to escape the sandbox and access the answer.