Or OpenAI can adequately sandbox / access control the backend compute so RCE isn’t a path to lateral movement

Defense in depth here would have been adequate

Defense in depth + defense in breadth - aka. all of the above

sandbox escapes have been the rage recently