The model is really good at hacking, we all know this. This is why you don't just expose random pieces of software to it without that software being hardened.

It's not like the model managed to exploit firecracker itself (no model has been capable of this), the model exploited artifactory.

Artifactory is not some hardened piece of software that is meant to block users from accessing the internet through it.

Agents didn't have real network isolation. They were indirectly connected to the internet via a jump host running insecure software which was never designed or hardened to provide any kind of isolation.