It seems to me they've had enough foresight to prevent their openclaw credentials from being stolen via copy-fail

Can you elaborate? Has it been shown that copy-fail can break through KVM boundaries in Linux?

I understood it to be local-only (which is more likely to affect containers, bit I don't thinkmthat was demonstrated either).