That works as long as no one ever interacts with the models, which would make the models themselves useless.

Could sit in the box and interact if a model of certain capabilities is needed/tested. We do physical security for other things, too. Not saying everything needs that type of isolation.