Sandbox isolation is not absolutely secure; when a model's capabilities are sufficiently strong, the isolation environment itself becomes a target of attack.