they are not real sandboxes lol
And when they try, they still end up having comical bugs
https://oddguan.com/blog/second-time-same-sandbox-anthropic-claude-code-network-allowlist-bypass-data-exfiltration/
https://infosec.exchange/@sharkfie/116965094091608683
