Yeah but leaking because Anthropic leaked your email vs. you underengineered your sandbox are two very different failure modes imo.

LLMs are supposed to be a panacea for building digital systems. A sandbox inside which an LLM can operate freely surely should be one of the first systems we should all strive to engineer.

If we can't properly sandbox an LLM, I would say that's a pretty good sign that LLMs are not a panacea for building digital systems.

Even if they’re not a panacea we have to accept the reality that all enterprise IT environments have at least some level of LLM exposure and figure out a way to manage the situation.