> wildly negligent to not be running it in a physically-airgapped environment
Why should it be physically airgapped? Clients won't be doing that.
Because they are testing it and are expected to erect guardrails before releasing.
Because by the time it goes out to clients it (should be) thoroughly tested and aligned for safety, but at the present moment it isn't.
Clients are not using it with security guardrails disabled. If you want to run it with all the safeties turned off, you don’t run it somewhere it can escape.
Did we learn nothing from all of those Star Trek holodeck jailbreaks?