A sufficiently smart model could get somewhere that way. But again, I think it's less likely that our current ones are already there than that they can defeat the protections outlined in the post. So sandboxing would help.

Yeah I agree more sandboxing is better, but still no safety critical assumption should be made on the impossibility of inter agent communication.