Researchers found confidence increased even as accuracy fell

Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job