Even with a single agent, why the hell was this not properly air gapped / disconnected with network monitoring in place. Definitely not adequate for anything.

This is like sysadmin 101 level stuff.

Do you seriously think that "properly air gapped / disconnected with network monitoring in place" is "like sysadmin 101 level stuff"?

Have you ever seen any actual real corporate networks? Or, at least, heard of them in the passing?

Because your expectations are overinflated. Badly.

OpenAI's network was very much above average. Not top of the line, but way better than most of what I've seen.

It still didn't hold against over 9000 experimental AI agents, some of which found a way to bundle up and coordinate. An actual "sysadmin 101 level" network might as well be a rolled carpet to a threat like this.