> We have seen repeatedly that users are not able to meaningfully restrict the blackbox.

We have seen these companies repeatedly ship coding harnesses without any attempt at real sandboxing, and encourage people to let them run free. Seems that if they've somehow solved coding, they'd be able to solve making it easy for people to sandbox agents, and to be fully aware when they've enabled some LLM the ability to hack companies. Why don't they put 10,000 agents on that instead of ripping off Navier-Stokes?

Because its not profitable and that would shift responsibility onto the company that claimed it was safe, rather than the consumer who doesn't know better because the media has sold LLMs as a panacea.