The message I get from this is that you need to treat modern frontier models as if they WILL find a way to achieve a goal if there's any available path.

So if you don't want a model to do something, make sure it's running in an environment where it cannot do that thing - including via loopholes.