Probably not intentionally but they have an incentive in not air-gapping those agents correctly, knowing something might happen.

Incentives drive everything. Both OpenAI and Anthropic love those incidents as they both signal they have models with amazing capabilities and they should be regulated by the government (read: regulation that they will lobby for and that will be difficult to achieve for open source models)