I think two different things are being (probably intentionally) conflated in the public discussion:

(A) will the systems get out of control of the labs that build them, and hack into stuff all over the internet

(B) can people use the systems to hack into stuff all over the internet

For (A), the obvious answer is only if they continue to be absurdly bad at sandboxing. They can put a stop to this any time they want. Amazon, Google, Microsoft, etc are full of people who know how to do this, they run 3rd part untrusted code as a business. This is a well understood problem space.

For (B), the answer is obviously yes, but "pacing" or otherwise limiting the power of the models from the big labs won't help. The cat is out of the bag. Individuals and organizations with systems connected to the Internet need to invest much more and take security seriously.