Comment by nl

> set up the environment sloppily

The model used a zero-day exploit to escape, and then multiple chained privilege escalations to escape.

That indicates the environment both was hardened against all known attacks and had defenses in depth.