Instead of focusing on escape, I’ll focus on human control. Depends on the restrictions, if there’s a weak link it will find it eventually.

I’m not mitigating these risks. I literally gave models my old laptops to have fun with.