schizo hypothesis: As soon as any observer (e.g. a human) figures out how to effectuate control-relevant things in the simulation host (akin to producing tokens to break out of a sandbox), they would get silently resampled.

It is plausibly not possible to code a simulation the simulated subject could not steer the world through, because simulation hosts want to learn something from the simulation, and simulation hosts are not secure systems! (i.e. they must look at some output).