They address this in the article:

> it’s also important that they learn how to browse, search for information, and work with web applications

Also, keep in mind that isolating complex systems is not simple. Agents need to be in sandboxes, but for example, the sandboxes themselves may need to be kept up to date, or may need to be monitored, or the sandboxes may need to updated, or they may be connected to specific services etc. Not saying that it's impossible, but it's complex.

In the HuggingFace incident for example, the hosts themselves were not connected to the internet. But a service they were using was, indirectly, and that's what the agents attacked.

> It's what the military does, and they use color-coded cables to avoid accidental interconnections between classified and unclassified networks.

Requirements are very likely different. I presume that handling thousands of agents is enormously more complex than secret documents or "static" applications.

In the OpenAI case, agents even hacked the internal OpenAI network. Isolating networks (which was probaly done to an extent at OpenAI) can still result in one network being "infected", and that is... interesting, to say the least.