It can simultaneously be true that agents exploited zero days in self-hosted Artifactory _and_ that there was a weak point in the design of the sandbox.

This is a reality for all software, there is always a possibility of exploit so you design your environments accordingly (e.g do not have single points of failure)