I think there's a strong possibility that the model labs just figure out that running the agent inside a "sandbox" and doing RL on it as part of training is completely untenable beyond some threshold; not in an "it will bide its time to take over the world sense", but in an "it interferes with deployment so much that you cannot make money from them" sense.