> [still] can't control their own models

Have we not seen several examples of older such models exploiting the docker control socket, etc., to escape containers? Even the news isn't new.

I support it being repeatedly publicized, but a bit more of a straightforward description would be an improvement.