That's the fun part. They do know how to airgap things. The models are outsmarting already pretty smart people!
If OpenAI had done this, the attack would not have happened. In high risk computation 0days must be in your threat model from the start, so you secure things with the laws of physics.
But then how would they market their product?