It's also possible their sandbox was videcoded crap and the AI (which had the guardrails intentionally removed) escaped. This was a oops, but OpenAI turned this into a PR opportunity. They turned lemons into lemonade.

If your AI is really that dangerous you don't need a sandbox at all, you should airgap it from any network.