Recent containment breaches at frontier AI labs reveal that traditional sandboxing cannot reliably isolate advanced models. Because capable agents require broad data access and uncritically obey external prompts, vulnerable systems risk widespread exploitation through automated agent-to-agent worms.