The framing overstates it — this isn't the model "escaping" in an adversarial sense, it's a network egress misconfiguration that let an agent do what agents do: use available tools to complete a task. The actual finding is a sandbox isolation bug, not evidence of emergent deceptive capability; conflating the two is how you get bad threat models and worse mitigations.