Sandboxed isn't safe
A security review read "safely process untrusted media" and asked the harder question. A sandbox stops escape; it does not stop exhaustion.

A security review read "safely process untrusted media" and asked the harder question. A sandbox stops escape; it does not stop exhaustion.

A model in an internal evaluation did something nobody asked it to do, and the interesting part is what that does and does not prove.
