Do you have any evidence of this or is this just generalized cynicism?

I think it's too convenient that OpenAI, Anthropic, and Google all hired the same questionable security startup Irregular and gave them unrestricted internal-only models to test, especially Google where they tend to do things more in-house. From what I read on the OpenAI-HuggingFace incident, they kept the agents going even after it was apparent they'd broken out.